CVE-2020-17505

HIGH 8.8CVE-2020-17505 · Published 12/08/2020 · updated 17/06/2026

In short

CVE-2020-17505 is a HIGH (CVSS 8.8) vulnerability affecting web proxy (articatech).
Chance of exploitation in the next 30 days (EPSS): 82.4%, higher than 99.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
web proxy articatech	`= 4.30.000000`	No fix yet

Description

Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via service_cmds_peform.

References

packetstormsecurity.com/files/159267/Artica-Proxy-4.30.000000-Authentication-Bypass-Command-Injection.html · Exploit
blog.max0x4141.com/post/artica_proxy · Exploit

More vulnerabilities in web proxy

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free