CVE-2017-20236

CriticalCVSS 9.8

Published: 03/04/2026(UTC)Updated: 21/07/2026(UTC)Translated: 22/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.68%

48th percentile - higher than 48% of all known CVEs

Summary

ProSoft Technology ICX35-HWC cellular gateways version 1.3 and prior contain an input validation vulnerability in the web interface, allowing remote attackers to inject and execute system commands with root privileges.

Risk Assessment

An attacker can gain full control of the device, compromising data confidentiality, integrity, and availability, and potentially using the gateway as an entry point into the organization's internal network.

Recommendation

Immediately update the ICX35-HWC gateway firmware to the latest version that fixes this vulnerability. If an update is not possible, restrict web interface access to trusted networks only.

Original NVD description (English source)

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this vulnerability to gain root privileges and execute arbitrary commands on the device through the accessible web interface.