Vulnerabilities (CVE)

Filtered by vendor Comtrend Subscribe
Filtered by product Vr-3033
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10173 1 Comtrend 2 Vr-3033, Vr-3033 Firmware 2024-02-04 9.0 HIGH 8.8 HIGH
Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.