CVE-2020-10173

8.8 highEPSS 77%

High (8.8) in comtrend vr-3033 firmware. EPSS 77% chance of exploitation in the next 30 days.

Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 77% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2020-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

comtrend:vr-3033_firmware

References

https://www.exploit-db.com/exploits/48142
https://www.exploit-db.com/exploits/48142

Check your stack JSON