Comtrend Vulnerabilities and Affected Products
Vulnerabilities associated with vr-3033_firmware.
Products
Clear product- Comtrend WLD71-T1_v2.0.2018202 vulnerabilities
- AR-53101 vulnerability
- vr-3033_firmware1 vulnerability
- wld71-t11 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-10173HIGH | comtrend vr-3033_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi. CWE-78Mar 5, 2020 | CVSS8.8v3.1 | EPSS76.8% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |