What’s Vulnerable › Vulnerabilities

CVE-2020-10173

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 77.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-03-05 · updated 2026-06-17
• Weakness: CWE-78

Description

Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.

Affected products

• Comtrend Vr-3033 Firmware: de11-416ssg-c01_r02.a2pvi042j1.d26m

References

• https://www.exploit-db.com/exploits/48142
• https://www.exploit-db.com/exploits/48142

Get alerted when CVE-2020-10173 or the next vulnerability affects your stack