PT-2026-30260 · Undefined · Undefined

Published 2026-04-03 · Updated 2026-04-03 · CVE-2017-20236

NVD

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this vulnerability to gain root privileges and execute arbitrary commands on the device through the accessible web interface.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2017-20236

Affected Products

Undefined

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-20236 · Security Note
• https://assets.belden.com/m/1116a05ab702b2ba/original/Security-Bulletin-User-Interface-ProSoft-ICX35-BSECV-2017-10.pdf · Note
• https://vulncheck.com/advisories/prosoft-technology-icx35-hwc-command-injection-via-web-interface · Note