CVE-2017-20235 - CVE House
Back to Database
Status published Critical CVE-2017-20235

ProSoft Technology ICX35-HWC Authentication Bypass

Vulnerability Description

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechanism in affected firmware versions to obtain full administrative access to device configuration and settings.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-20235

Credits & Attribution

No credits recorded in the NVD database.

References

More from ProSoft Technology

View All →
CVE-2017-20236
ProSoft Technology ICX35-HWC Command Injection via Web Interface
Critical 9.3

Affected Vendor

ProSoft Technology

View all reports →

Affected Software

ICX35-HWC Cellular Gateway
Vulnerable Versions:
0

Timeline

Official Publish: April 3rd, 2026
Last Modified: May 25th, 2026
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-287

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1556 Modify Authentication Process
Credential Access