high8.8Public exploit code
CVE-2020-10173
Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnost…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Comtrend VR-3033 - Command Injection2020-02-27 · webapps · hardware
Impact
Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comtrend | Vr-3033 Firmware | Version de11-416ssg-c01_r02.a2pvi042j1.d26m |