CVE-2019-16733

2019-12-1320:32:53

mitre

www.cve.org

9.9 High

AI Score

Confidence

High

0.069 Low

EPSS

Percentile

94.0%

JSON

processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.

References

blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3