← back
CVE-2020-5179

CVE-2020-5179

EPSS 2.8%
Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page and entering shell metacharacters in the Target IP address field. (In some cases, authentication can be achieved with the comtech password for the comtech account.)
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://overload.cl/blog/comtech-authenticated-rce-on-comtech-fx-series/https://sku11army.blogspot.com/2020/01/comtech-authenticated-rce-on-comtech-fx.html