CVE-2020-10173

CVE-2020-10173 describes multiple authenticated command injection vulnerabilities in Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices, specifically through the ping and traceroute diagnostic pages. This vulnerability carries a CVSS score of 8.8 (HIGH), indicating a critical risk where an authenticated attacker can achieve full compromise (confidentiality, integrity, availability) with low attack complexity over the network. Exploit code is publicly available via ExploitDB, and there is evidence of active exploitation by malware like Mirai and BotenaGo, as highlighted by significant community discussion and media coverage.