critical9.8
CVE-2020-9027
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd.
Impact
ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eltex-Co | Ntp-2 Firmware | Version 3.25.1.1226 |
| Eltex-Co | Ntp-Rg-1402g Firmware | Version 3.25.3.32 |