CVE-2020-7594

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-01-21 · updated 2026-06-17
Weakness: CWE-78

Description

MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function.

Affected products

Multitech Conduit Mtcdt-Lvw2-246A Firmware: 1.4.17-ocea-13592

References

https://sku11army.blogspot.com/2020/01/multitech-authenticated-remote-code.html
https://sku11army.blogspot.com/2020/01/multitech-authenticated-remote-code.html

Get alerted when CVE-2020-7594 or the next vulnerability affects your stack