CVE-2020-10173

Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-03-05

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Vr-3033 Firmware (Comtrend)

References

• https://www.exploit-db.com/exploits/48142