High severity7.2NVD Advisory· Published Jan 21, 2020· Updated Jun 17, 2026

CVE-2020-7594

Description

MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function.

Affected products

MultiTech/Conduit MTCDT-LVW2-24XXdescription
Multitech/Conduit MTCDT-LVW2-24XXllm-create
Range: =1.4.17-ocea-13592

Patches

Vulnerability mechanics

References

sku11army.blogspot.com/2020/01/multitech-authenticated-remote-code.htmlnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000