CVE-2017-20236

Name of the Vulnerable Software and Affected Versions ProSoft Technology ICX35-HWC versions 1.3 and earlier

Description An input validation flaw exists in the web user interface of the cellular gateway. This issue allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields, potentially leading to the acquisition of root privileges and the execution of arbitrary commands on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.