CVE-2020-17456

PoC ×2—1

CVSS 3.1

9.8 critical

EPSS

74%p99

Published

Aug 20, 2020 (Aug 20, 2020)

Modified

Jun 17, 2026

Description

SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.

Vendors: seowonintech
Products: slc-130 firmware, slr-120s firmware, slr-120s42g firmware, slr-120d42g firmware, slr-120t42g firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (73.6%)

In the news3 stories

EnemyBot malware adds new exploits to target CMS servers and Android devices

Security AffairsMay 30, 07:09 UTC · May 30, 2022Malware CVE-2020-17456 CVE-2018-10823 CVE-2022-27226+19 CVEs

60

New EnemyBot DDoS Botnet Borrows Exploit Code from Mirai and Gafgyt

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2022Malware CVE-2020-17456 CVE-2018-10823 CVE-2022-27226+2 CVEs

47

Enemybot, a new DDoS botnet appears in the threat landscape

Security AffairsApr 17, 17:53 UTC · Apr 17, 2022Malware CVE-2020-17456 CVE-2018-10823 CVE-2022-27226+9 CVEs

35