{"cve":"CVE-2020-17456","nvd":{"published":"2020-08-20T01:17:13.993","modified":"2026-06-17T02:58:57.840","status":"Modified","description":"SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":["CWE-78"],"references":["http://packetstormsecurity.com/files/158933/Seowon-SlC-130-Router-Remote-Code-Execution.html","http://packetstormsecurity.com/files/166273/Seowon-SLR-120-Router-Remote-Code-Execution.html","https://github.com/TAPESH-TEAM/CVE-2020-17456-Seowon-SLR-120S42G-RCE-Exploit-Unauthenticated","https://maj0rmil4d.github.io/Seowon-SlC-130-And-SLR-120S-Exploit/","https://www.exploit-db.com/exploits/50821"],"products":["seowonintech:slc-130_firmware","seowonintech:slr-120d42g_firmware","seowonintech:slr-120s42g_firmware","seowonintech:slr-120s_firmware","seowonintech:slr-120t42g_firmware"],"source":"nvd","synced_at":"2026-10-19T21:09:20.498348299+00:00"},"epss":{"cve":"CVE-2020-17456","score":0.74227,"percentile":0.99487,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}