CVE-2020-7594
Last modified
CVE-2020-7594 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function.. EPSS estimates a 2.49% chance of exploitation in the next 30 days.
Description
MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Multitech | Conduit Mtcdt-Lvw2-246a Firmware | 1.4.17-ocea-13592 |
References
- https://sku11army.blogspot.com/2020/01/multitech-authenticated-remote-code.htmlExploit, Third Party Advisory
- https://sku11army.blogspot.com/2020/01/multitech-authenticated-remote-code.htmlExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-7594?
How severe is CVE-2020-7594?
How do I fix CVE-2020-7594?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-7588A vulnerability has been identified in Opcenter Execution Di…5.3
- CVE-2020-7589A vulnerability has been identified in LOGO! 8 BM (incl. SIP…9.1
- CVE-2020-7590A vulnerability has been identified in DCA Vantage Analyzer …6.8
- CVE-2020-7591A vulnerability has been identified in SIPORT MP (All versio…8.8
- CVE-2020-7592A vulnerability has been identified in SIMATIC HMI Basic Pan…6.5
- CVE-2020-7593A vulnerability has been identified in LOGO! 8 BM (incl. SIP…9.8
- CVE-2020-7595xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has…7.5
- CVE-2020-7596Codecov npm module before 3.6.2 allows remote attackers to e…8.8
- CVE-2020-7597codecov-node npm module before 3.6.5 allows remote attackers…8.8
- CVE-2020-7598minimist before 1.2.2 could be tricked into adding or modify…5.6
- CVE-2020-7599All versions of com.gradle.plugin-publish before 0.11.0 are …6.5
- CVE-2020-7600querymen prior to 2.1.4 allows modification of object proper…5.3
Are you affected by CVE-2020-7594?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST