Home / Vulnerability Intelligence / CVE-2017-20236

CVE-2017-20236 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: April 3, 2026

ProSoft Technology ICX35-HWC - Command Injection

Published: April 3, 2026Updated: April 3, 2026Remote Exploitable

Overview

ProSoft Technology ICX35-HWC <= 1.3 contains a command injection caused by insufficient input validation in the web user interface, letting remote attackers execute arbitrary commands with root privileges, exploit requires access to the web interface.

Severity & Score

Severity: Critical

CVSS Score: 9.8

Impact

Remote attackers can execute arbitrary commands with root privileges, leading to full device compromise.

Mitigation

Update to the latest version of ProSoft Technology ICX35-HWC.

References

https://assets.belden.com/m/1116a05ab702b2ba/original/Security-Bulletin-User-Interface-ProSoft-ICX35-BSECV-2017-10.pdf
https://www.vulncheck.com/advisories/prosoft-technology-icx35-hwc-command-injection-via-web-interface

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2017-20236
Severity: Critical
CVSS Score: 9.8
Type: command_injection
Status: new

CWE

CWE-78

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H