CVE-2017-20236: critical vulnerability in ProSoft Technology ICX35-HWC Cellular Gateway
ProSoft Technology ICX35-HWC Command Injection via Web Interface
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.3epss 0.7%
ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this vulnerability to gain root privileges and execute arbitrary commands on the device through the accessible web interface.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
ProSoft Technology · ICX35-HWC Cellular GatewayRelated CVEs — ProSoft Technology ICX35-HWC Cellular Gateway
In the same product, most dangerous first.