CVE-2020-10173

CVSS 3.1: 8.8 high
EPSS: 77%p100
Published: Mar 5, 2020 · Mar 5, 2020
Modified: Jun 17, 2026

Analyze CVE-2020-10173 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.

Vendors: comtrend

Products: vr-3033 firmware

Weakness: CWE-78

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (77.1%)

In the news

3 stories

Ddos-Attacks-In-Q2

Kaspersky SecurelistOct 28, 10:00 UTC · Oct 28, 2020RansomwareCVE-2020-10173 CVE-2020-59023 · 2 reads

New Mirai variant includes exploit for a flaw in Comtrend Routers

Security AffairsJul 14, 08:10 UTC · Jul 14, 2020Exploit / PoCCVE-2020-101732 · 1 read

BotenaGo botnet targets millions of IoT devices using 33 exploits

Security AffairsNov 12, 07:16 UTC · Nov 12, 2021MalwareCVE-2020-8515 CVE-2015-2051 CVE-2016-1555+173 · 1 read