{"cvss":0.0,"datePublished":"2020-05-07T00:00:00Z","dateUpdated":"2020-05-07T00:00:00Z","description":"Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.","dueDate":"","id":"CVE-2020-10173","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"vr-3033_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"comtrend vr-3033_firmware Improper Neutralization of Special Elements used in an OS Command","vendor":"comtrend"}