ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 3, 2026 · NIST NVD

   Detected

   ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this vulnerability to gain root privileges and execute arbitrary commands on the device through the accessible web

2. Jul 21, 2026 · NIST NVD

   Updated

   ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this vulnerability to gain root privileges and execute arbitrary commands on the device through the accessible web

Affected

• cpe prosoft-technology/icx35-hwc firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2017-20236

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2017-20236

  ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exp

  nvd.nist.gov

References

• Vendor Advisory · assets.belden.com
• Third Party Advisory · vulncheck.com