CVE-2020-7594: Multitech Conduit Mtcdt-LVW2-246a Firmware

High severity, CVSS 7.2. EPSS: 2.5% chance of exploitation in the next 30 days.

MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function.

Affected products

• Multitech Conduit Mtcdt-LVW2-246a Firmware: version 1.4.17-ocea-13592 only

Published 2020-01-21. Last modified 2026-06-17.