CVE-2020-7243
Last modified
CVE-2020-7243 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Fetch URL page and entering shell metacharacters in the URL field. (In some cases, authentication can be achieved with the comtech password for the comtech account.). EPSS estimates a 4.24% chance of exploitation in the next 30 days.
Description
Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Fetch URL page and entering shell metacharacters in the URL field. (In some cases, authentication can be achieved with the comtech password for the comtech account.)
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Comtech | Stampede Fx-1010 Firmware | 7.4.3 |
References
- https://sku11army.blogspot.com/2020/01/comtech-multiple-authenticated-rce-on.htmlExploit, Third Party Advisory
- https://sku11army.blogspot.com/2020/01/comtech-multiple-authenticated-rce-on.htmlExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-7243?
How severe is CVE-2020-7243?
How do I fix CVE-2020-7243?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-7237Cacti 1.2.8 allows Remote Code Execution (by privileged user…8.8
- CVE-2020-7238Netty 4.1.43.Final allows HTTP Request Smuggling because it …7.5
- CVE-2020-7239The conversation-watson plugin before 0.8.21 for WordPress h…6.1
- CVE-2020-7240Meinberg Lantime M300 and M1000 devices allow attackers (wit…8.8
- CVE-2020-7241The WP Database Backup plugin through 5.5 for WordPress stor…7.5
- CVE-2020-7242Comtech Stampede FX-1010 7.4.3 devices allow remote authenti…7.2
- CVE-2020-7244Comtech Stampede FX-1010 7.4.3 devices allow remote authenti…7.2
- CVE-2020-7245Incorrect username validation in the registration process of…9.8
- CVE-2020-7246A remote code execution (RCE) vulnerability exists in qdPM 9…8.8
- CVE-2020-7247smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in…9.8
- CVE-2020-7248libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 ha…7.5
- CVE-2020-7249SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID f…4.8
Are you affected by CVE-2020-7243?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST