CVE-2018-20122: Fastweb Fastgate Firmware

Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days.

The web interface on FASTGate Fastweb devices with firmware through 0.00.47_FW_200_Askey 2017-05-17 (software through 1.0.1b) exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is required in order to trigger the vulnerability.

Affected products

• Fastweb Fastgate Firmware: up to and including 1.0.1b

Published 2019-02-21. Last modified 2026-06-17.