CVE-2017-20235CWE-287

ProSoft Technology ICX35-HWC Authentication Bypass

Critical · published April 3, 2026

CVSS v4.0
9.3
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechanism in affected firmware versions to obtain full administrative access to device configuration and settings.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00451 · 38.2th percentile
Weakness
CWE-287 · Improper Authentication
Published
2026-04-03T22:51Z
EPSS history
Timeline
  • 03 APR 22:51Z
    ProSoft Technology ICX35-HWC Authentication Bypass
    cvelistv5