CVE-2017-20236 in ICX35-HWC Cellular Gateway
Summary
ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this vulnerability to gain root privileges and execute arbitrary commands on the device through the accessible web interface.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Responsible
VulnCheck
Reservation
04/03/2026
Disclosure
04/04/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 355238 | ProSoft ICX35-HWC Cellular Gateway Web User os command injection | 78 | Not defined | Not defined | CVE-2017-20236 |