← All advisories

Critical severity9.8NVD Advisory· Published Feb 17, 2020· Updated Jun 17, 2026

CVE-2020-9026

CVE-2020-9026

Description

ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected.

Affected products

5

ELTEX/NTP-RG-1402Gdescription
Eltex/NTP-2llm-fuzzy
Eltex/NTP-RG-1402Gllm-fuzzy
Range: 3.25.3.32
Eltex Co/NTP 2 Firmware
cpe:2.3:o:eltex-co:ntp-2_firmware:3.25.1.1226:*:*:*:*:*:*:*
Eltex Co/NTP Rg 1402g Firmware
cpe:2.3:o:eltex-co:ntp-rg-1402g_firmware:3.25.3.32:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

sku11army.blogspot.com/2020/01/eltex-devices-ntp-rg-1402g-ntp-2-os.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.