CVE-2020-17506

CRITICAL 9.8CVE-2020-17506 · Published 12/08/2020 · updated 17/06/2026

In short

CVE-2020-17506 is a CRITICAL (CVSS 9.8) vulnerability affecting web proxy (articatech).
Chance of exploitation in the next 30 days (EPSS): 94.0%, higher than 99.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
web proxy articatech	`= 4.30.000000`	No fix yet

Description

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php.

References

packetstormsecurity.com/files/158868/Artica-Proxy-4.3.0-Authentication-Bypass.html · Exploit
packetstormsecurity.com/files/159267/Artica-Proxy-4.30.000000-Authentication-Bypass-Command-Injection.html · Exploit
blog.max0x4141.com/post/artica_proxy · Exploit

More vulnerabilities in web proxy

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free