CVE-2017-20235

CriticalCVSS 9.1

Published: 03/04/2026(UTC)Updated: 21/07/2026(UTC)Translated: 22/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

37th percentile - higher than 37% of all known CVEs

Summary

ProSoft Technology ICX35-HWC cellular gateways version 1.3 and prior contain an authentication bypass vulnerability in the web interface. Unauthenticated attackers can gain administrative access without valid credentials.

Risk Assessment

An attacker can gain full administrative control over device configuration and settings, compromising the confidentiality, integrity, and availability of the industrial network.

Recommendation

Immediately update the firmware of ICX35-HWC cellular gateways to a version newer than 1.3 that addresses this vulnerability.

Original NVD description (English source)

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechanism in affected firmware versions to obtain full administrative access to device configuration and settings.