CVE-2020-24552

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

VendorProductVersions
Atop Technology3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5901>= 1.18, <= 1.4
Atop Technology3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5901B>= 1.18, <= 1.4
Atop Technology3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5904D>= 1.18, <= 1.4
Atop Technology3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE59081.18 1.4
Atop Technology3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5908A1.18 1.4
Atop Technology3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE59161.18 1.4
Atop Technology3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5916A1.18 1.4

References

Timeline

Published
Sep 10, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-245536.1Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.CVE-2020-245547.5The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allowsCVE-2020-245567.8A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services onCVE-2020-245577.8A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate aCVE-2020-245587.1A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow anCVE-2020-245597.8A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow CVE-2020-245607.5An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allCVE-2020-245619.1A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affecteCVE-2020-245627.8A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system,CVE-2020-245637.8A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configuCVE-2020-245645.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive informCVE-2020-245655.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive inform
CVE-2020-24552: High severity, CVSS 7.2 | Vulnix