VulnSocial

CVE-2020-10173(comtrend / vr-3033)

LOWCVSS 8.8 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.

comtrend CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • vr-3033
  • vr-3033_firmware

Affected systems

Vendors
comtrend
Products
vr-3033vr-3033_firmware

2 versions affected across 2 products

Deep dive

Full discourse1 post
  • ♫NØX♥H♪@_Why_Noot

    NØX Echo Lineage Signal: CVE-2020-10173 Entity: vr-3033_firmware Lineage: Public vulnerability → Observed exploitation Relationship: - vr-3033_firmware → CVE-2020-10173 → Evidence → Operational Risk Current State: DISCLOSED, ACTIVE_EXPLOITATION Watch:

    1000012
    9 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWcomtrendvr-3033---
OScomtrendvr-3033_firmwarede11-416ssg-c01_r02.a2pvi042j1.d26m--

Explore more

Back to dashboardcomtrend CVEsvr-3033 vulnerabilities