Command injection

Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi...

PT-2020-11955

Name of the Vulnerable Software and Affected Versions Comtrend VR-3033 DE11-416SSG-C01 R02.A2pvI042j1.d26m Description The issue concerns Multiple Authenticated Command Injection vulnerabilities. These vulnerabilities can be exploited via the ping and traceroute diagnostic pages. Specifically, th...

CVE-2020-10173: Improper Neutralization of Special Elements used in an OS Command

Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi...