Code injection

2018-06-1218:29:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.8%

JSON

An issue was discovered on Momentum Axel 720P 5.1.8 devices. Root access can be obtained via UART pins without any restrictions, which leads to full system compromise.

CPENameOperatorVersion
momentum_axel_720p_firmwareeq5.1.8

CPE	Name	Operator	Version
	momentum_axel_720p_firmware	eq	5.1.8

References

rchase.com/downloads/momentum-iot-penetration-test-report.pdf