Design/Logic Flaw

2019-12-1123:15:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.9%

JSON

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter.

CPENameOperatorVersion
blink_xt2_sync_module_firmwarelt2.13.11

CPE	Name	Operator	Version
	blink_xt2_sync_module_firmware	lt	2.13.11

References

www.tenable.com/security/research/tra-2019-51