CVE-2020-23583 - OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution · CoreCVE

Back Back to CVE browser

CRITICAL

OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution

Published Nov 23, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 2.31%

Description

OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary code on "/diag_ping_admin.asp" to "PingTest" interface that leads to COMMAND EXECUTION. An attacker can successfully trigger the COMMAND and can compromise full system.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-77

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-16327
Advisory
https://github.com/huzaifahussain98/CVE-2020-23583
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-16327		Advisory
https://github.com/huzaifahussain98/CVE-2020-23583		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 23, 2022

Updated Apr 25, 2025

Reserved Aug 13, 2020

Link CVE-2020-23583

CISA Vulnrichment

Updated Apr 25, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-23583

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 23, 2022

Updated Apr 25, 2025

Link EUVD-2020-16327

GitHub

No data