CVE-2020-24552

Published: Sep 10, 2020

Modified: Sep 16, 2024

PUBLISHED

CVSS v3.1

5.5

MEDIUM

Description

Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege.

Vendor	Product	Versions
Atop Technology	3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5901	affected `1.18 - <= 1.4`
Atop Technology	3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5901B	affected `1.18 - <= 1.4`
Atop Technology	3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5904D	affected `1.18 - <= 1.4`
Atop Technology	3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5908	affected `1.18 1.4`
Atop Technology	3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5908A	affected `1.18 1.4`
Atop Technology	3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5916	affected `1.18 1.4`
Atop Technology	3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5916A	affected `1.18 1.4`

Weaknesses (CWE)

CWE-78

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

References

https://www.twcert.org.tw/tw/cp-132-3956-608f1-1.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-24552

Description

Affected Products

Weaknesses (CWE)

CVSS v3.1 Details

References