CVE-2020-7243

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Fetch URL page and entering shell metacharacters in the URL field. (In some cases, authentication can be achieved with the comtech password for the comtech account.)

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2020-01-20

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Stampede Fx-1010 Firmware (Comtech)

References

• https://sku11army.blogspot.com/2020/01/comtech-multiple-authenticated-rce-on.html