CVE-2020-13159

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-06-22 · updated 2026-06-17
Weakness: CWE-78

Description

Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.

Affected products

Artica Tech Artica Proxy: before 4.30.000000 — fixed in 4.30.000000

How to fix

Upgrade to a fixed version: Artica Tech Artica Proxy 4.30.000000. Check the vendor advisory for mitigations.

References

https://github.com/InfoSec4Fun/CVE-2020-13159
https://sourceforge.net/projects/artica-squid/files/
https://github.com/InfoSec4Fun/CVE-2020-13159
https://sourceforge.net/projects/artica-squid/files/

Get alerted when CVE-2020-13159 or the next vulnerability affects your stack