CVE-2020-10173

CVE-2020-10173 affects Comtrend VR-3033 routers (DE11-416SSG-C01_R02.A2pvI042j1.d26m). The flaw is Multiple Authenticated Command Injection via the ping and traceroute diagnostic pages, demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi. Exploitation requires at least...