2 matches found
Command injection
Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi...
9CVSS9.1AI score0.77129EPSS
SaveExploits3References1Affected Software1
CVE-2020-10173: Improper Neutralization of Special Elements used in an OS Command
Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi...
9CVSS7.8AI score0.77129EPSS
SaveExploits3References2
20