Design/Logic Flaw

2020-03-0402:15:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.1%

JSON

OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.

CPENameOperatorVersion
openblocks_iot_vx2_firmwarege3.3.0
openblocks_iot_vx2_firmwarelt4.0.0

CPE	Name	Operator	Version
	openblocks_iot_vx2_firmware	ge	3.3.0
	openblocks_iot_vx2_firmware	lt	4.0.0

References

jvn.jp/en/jp/JVN19666251/index.html

www.plathome.co.jp/software/vx2-v4-0-0/