Skip to main content

Artica Proxy CVE-2020-10818

HIGH
OS Command Injection (CWE-78)
2020-03-22 cve@mitre.org
Command Injection Artica Proxy
7.2
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.2 HIGH
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 22, 2020 - 20:15 nvd
HIGH 7.2

DescriptionNVD

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field.

AnalysisAI

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as OS Command Injection (CWE-78), which allows attackers to execute arbitrary operating system commands on the host. Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field. Affected products include: Articatech Artica Proxy.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Avoid passing user input to shell commands. Use language-specific APIs instead of shell execution. Apply strict input validation with allowlists.

More in Artica Proxy

View all
CVE-2024-2054 CRITICAL POC
9.8 Mar 21

The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users
CVE-2024-2056 CRITICAL POC
9.8 Mar 05

Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy servi
CVE-2024-2055 CRITICAL POC
9.8 Mar 05

The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. Rated cr
CVE-2020-13159 CRITICAL POC
9.8 Jun 22

Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name,

CVE-2017-17055 CRITICAL POC
9.0 Dec 07

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site
CVE-2024-2053 HIGH POC
7.5 Mar 21

The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users
CVE-2020-15052 HIGH POC
7.5 Jul 20

An issue was discovered in Artica Proxy CE before 4.28.030.418. Rated high severity (CVSS 7.5), this vulnerability is re
CVE-2020-13158 HIGH POC
7.5 Jun 22

Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parame
CVE-2019-7300 HIGH POC
7.2 Feb 01

Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/setting
CVE-2022-37153 MEDIUM POC
6.1 Aug 24

An issue was discovered in Artica Proxy 4.30.000000. Rated medium severity (CVSS 6.1), this vulnerability is remotely ex
CVE-2020-15053 MEDIUM POC
6.1 Jul 20

An issue was discovered in Artica Proxy CE before 4.28.030.418. Rated medium severity (CVSS 6.1), this vulnerability is

CVE-2020-15051 MEDIUM POC
6.1 Jul 15

An issue was discovered in Artica Proxy before 4.30.000000. Rated medium severity (CVSS 6.1), this vulnerability is remo

Same weakness CWE-78 – OS Command Injection

View all
CVE-2014-6271 CRITICAL POC
9.8
CVE-2014-6278 HIGH POC
8.8
CVE-2017-6334 HIGH POC
8.8
CVE-2024-50603 CRITICAL POC
10.0
CVE-2025-64328 HIGH POC
8.6
CVE-2014-7169 CRITICAL POC
9.8
CVE-2017-6884 HIGH POC
8.8
CVE-2017-6077 CRITICAL POC
9.8

Same technique Command Injection

View all
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2015-2051 HIGH POC
8.8
CVE-2014-6278 HIGH POC
8.8
CVE-2017-6334 HIGH POC
8.8
CVE-2024-50603 CRITICAL POC
10.0
CVE-2025-64328 HIGH POC
8.6

Share

CVE-2020-10818 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy