Design/Logic Flaw

2020-01-0214:16:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%

JSON

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page and entering shell metacharacters in the Target IP address field. (In some cases, authentication can be achieved with the comtech password for the comtech account.)

CPENameOperatorVersion
stampede_fx-1010_firmwareeq7.4.3

CPE	Name	Operator	Version
	stampede_fx-1010_firmware	eq	7.4.3

References

overload.cl/blog/comtech-authenticated-rce-on-comtech-fx-series/

sku11army.blogspot.com/2020/01/comtech-authenticated-rce-on-comtech-fx.html