Atop Technology 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway - Command Injection
Priority LOW 34CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.
Summary
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege.
Why it matters now
EPSS 0.01368 72nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5901 | 1.18 – 1.4 | — | No fix listed | CNA |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5901B | 1.18 – 1.4 | — | No fix listed | CNA |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5904D | 1.18 – 1.4 | — | No fix listed | CNA |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5908 | 1.18 1.4 | — | No fix listed | CNA |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5908A | 1.18 1.4 | — | No fix listed | CNA |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5916 | 1.18 1.4 | — | No fix listed | CNA |
| Atop Technology | 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5916A | 1.18 1.4 | — | No fix listed | CNA |
- 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5901 VendorAtop Technology Affected 1.18 – 1.4 Fixed in — No fix listed CNA
- 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5901B VendorAtop Technology Affected 1.18 – 1.4 Fixed in — No fix listed CNA
- 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5904D VendorAtop Technology Affected 1.18 – 1.4 Fixed in — No fix listed CNA
- 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5908 VendorAtop Technology Affected 1.18 1.4 Fixed in — No fix listed CNA
- 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5908A VendorAtop Technology Affected 1.18 1.4 Fixed in — No fix listed CNA
- 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5916 VendorAtop Technology Affected 1.18 1.4 Fixed in — No fix listed CNA
- 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway SE5916A VendorAtop Technology Affected 1.18 1.4 Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:atoptechnology:se5901_firmware:*:*:*:*:*:*:*:* | 1.18 – 1.40 | Vulnerable | Atop Technology |
| cpe:2.3:h:atoptechnology:se5901:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Atop Technology |
| cpe:2.3:o:atoptechnology:se5901b_firmware:*:*:*:*:*:*:*:* | 1.18 – 1.40 | Vulnerable | Atop Technology |
| cpe:2.3:h:atoptechnology:se5901b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Atop Technology |
| cpe:2.3:o:atoptechnology:se5904d_firmware:*:*:*:*:*:*:*:* | 1.18 – 1.40 | Vulnerable | Atop Technology |
| cpe:2.3:h:atoptechnology:se5904d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Atop Technology |
| cpe:2.3:o:atoptechnology:se5908_firmware:*:*:*:*:*:*:*:* | 1.18 – 1.40 | Vulnerable | Atop Technology |
| cpe:2.3:h:atoptechnology:se5908:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Atop Technology |
| cpe:2.3:o:atoptechnology:se5908a_firmware:*:*:*:*:*:*:*:* | 1.18 – 1.40 | Vulnerable | Atop Technology |
| cpe:2.3:h:atoptechnology:se5908a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Atop Technology |
- cpe:2.3:o:atoptechnology:se5901_firmware:*:*:*:*:*:*:*:* Versions 1.18 – 1.40 Vulnerable ·Atop Technology
- cpe:2.3:h:atoptechnology:se5901:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Atop Technology
- cpe:2.3:o:atoptechnology:se5901b_firmware:*:*:*:*:*:*:*:* Versions 1.18 – 1.40 Vulnerable ·Atop Technology
- cpe:2.3:h:atoptechnology:se5901b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Atop Technology
- cpe:2.3:o:atoptechnology:se5904d_firmware:*:*:*:*:*:*:*:* Versions 1.18 – 1.40 Vulnerable ·Atop Technology
- cpe:2.3:h:atoptechnology:se5904d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Atop Technology
- cpe:2.3:o:atoptechnology:se5908_firmware:*:*:*:*:*:*:*:* Versions 1.18 – 1.40 Vulnerable ·Atop Technology
- cpe:2.3:h:atoptechnology:se5908:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Atop Technology
- cpe:2.3:o:atoptechnology:se5908a_firmware:*:*:*:*:*:*:*:* Versions 1.18 – 1.40 Vulnerable ·Atop Technology
- cpe:2.3:h:atoptechnology:se5908a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Atop Technology
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:atoptechnology:se5916_firmware:*:*:*:*:*:*:*:* | 1.18 – 1.40 | Vulnerable | Atop Technology |
| cpe:2.3:h:atoptechnology:se5916:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Atop Technology |
| cpe:2.3:o:atoptechnology:se5916a_firmware:*:*:*:*:*:*:*:* | 1.18 – 1.40 | Vulnerable | Atop Technology |
| cpe:2.3:h:atoptechnology:se5916a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Atop Technology |
- cpe:2.3:o:atoptechnology:se5916_firmware:*:*:*:*:*:*:*:* Versions 1.18 – 1.40 Vulnerable ·Atop Technology
- cpe:2.3:h:atoptechnology:se5916:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Atop Technology
- cpe:2.3:o:atoptechnology:se5916a_firmware:*:*:*:*:*:*:*:* Versions 1.18 – 1.40 Vulnerable ·Atop Technology
- cpe:2.3:h:atoptechnology:se5916a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Atop Technology
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-24552
- 2026-10-03 Alias added: GHSA-76r8-wr7m-q22f
References
Sources
- CVE-2020-24552 · CVE Program
- CVE-2020-24552 · NVD
- FIRST EPSS
- GHSA-76r8-wr7m-q22f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences