CVE-2020-24552
Atop Technology 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway - Command Injection
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Atop Technology 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway - Command Injection
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege.
- Record
CVE-2020-24552- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N - Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2020-17272
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege.
- Record
EUVD-2020-17272- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-76r8-wr7m-q22f No score
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to...
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege.
- Record
GHSA-76r8-wr7m-q22f- Updated
- 2026-11-02
NVD
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege.
- Record
CVE-2020-24552- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N - CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
- atop technology 3g/4g lte cellular to ethernet and serial secure industrial gateway se5901
- atop technology 3g/4g lte cellular to ethernet and serial secure industrial gateway se5901b
- atop technology 3g/4g lte cellular to ethernet and serial secure industrial gateway se5904d
- atop technology 3g/4g lte cellular to ethernet and serial secure industrial gateway se5908
- atop technology 3g/4g lte cellular to ethernet and serial secure industrial gateway se5908a
- atop technology 3g/4g lte cellular to ethernet and serial secure industrial gateway se5916
- atop technology 3g/4g lte cellular to ethernet and serial secure industrial gateway se5916a
- atoptechnology se5901 firmware
- atoptechnology se5901b firmware
- atoptechnology se5904d firmware
- atoptechnology se5908 firmware
- atoptechnology se5908a firmware
Show 2 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-24552 is a medium vulnerability (CVSS 5.5) in Atop Technology 3g/4g Lte Cellular To Ethernet And Serial Secure Industrial Gateway Se5901, published September 10, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.37%, the 72nd percentile. No source names a fixed version.