CVE-2020-10173

Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

77.13% chance of exploitation in the next 30 days, 100th percentile

Published

2020-03-05

Updated

2024-08-04

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/48142

References

• CVE Record
• NVD entry

Related

• CVE-2020-1015
• CVE-2020-10181
• CVE-2020-10148
• CVE-2020-10189
• CVE-2020-10146
• CVE-2020-10199