What is CVE-2020-7594?

CVE-2020-7594 is a high-severity vulnerability in Multitech Conduit Mtcdt-Lvw2-246a, classified under OS Command Injection. CVSS score: 7.2/10. Published 2020-01-21.

How severe is CVE-2020-7594?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Multitech Conduit Mtcdt-Lvw2-246a

CVE-2020-7594

MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.025 (83.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Multitech Conduit_mtcdt-lvw2-246a
Multitech Conduit_mtcdt-lvw2-246a_firmware — versions 1.4.17-ocea-13592
N/a — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-7594?: CVE-2020-7594 is a high-severity vulnerability in Multitech Conduit Mtcdt-Lvw2-246a, classified under OS Command Injection. CVSS score: 7.2/10. Published 2020-01-21.
How severe is CVE-2020-7594?: High severity. CVSS v3 base score is 7.2 out of 10.