VYPR

VR-3033

by Comtrend

CVEs (1)

  • CVE-2020-10173Mar 5, 2020
    risk 0.07cvss epss 0.77

    Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.