Is CVE-2020-18331 actively exploited?

No active exploitation of CVE-2020-18331 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-18331 be exploited remotely?

Yes. CVE-2020-18331 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2020-18331?

CVE-2020-18331 has a CVSS score of 9.1 (CRITICAL).

HOME VULNERABILITIESCVE-2020-18331

CRITICAL

CVE-2020-18331

CWE-22Published: January 26, 2023· Updated: Jun 17, 2026

9.1

CVSS v3.1

Official Description

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01(hardware platform Gpn2.4P21-C_WIFI-V0.05), via the getpage parameter to /cgi-bin/webproc.

NVD Source

Risk Analysis

ChinaMobile wireless routers are vulnerable to directory traversal, allowing attackers to access sensitive files via the web interface. This critical flaw could lead to unauthorized information disclosure and system compromise.

No public exploit is known, and the vulnerability is not in the CISA KEV catalog. It is remotely exploitable with low attack complexity.

Recommended Action

Users should consult the manufacturer for firmware updates or restrict access to the device management interface to trusted networks.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2020-18331 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), with a CVSS base score of 9.1.