CVE-2019-16730

2019-12-1320:36:18

mitre

www.cve.org

9.9 High

AI Score

Confidence

High

0.064 Low

EPSS

Percentile

93.7%

JSON

processCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.

References

blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3

www.securityevaluators.com/research/