Command injection

2021-02-0211:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.3%

JSON

Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability in HTTP interface of ADT LifeShield DIY HD Video Doorbell allows an attacker on the same network to execute commands on the device. This issue affects: ADT LifeShield DIY HD Video Doorbell version 1.0.02R09 and prior versions.

CPENameOperatorVersion
lifeshield_diy_hd_video_doorbell_firmwareeq<= 1.0.2r9

CPE	Name	Operator	Version
	lifeshield_diy_hd_video_doorbell_firmware	eq	<= 1.0.2r9

References

labs.bitdefender.com/2021/01/cracking-the-lifeshield-unauthorized-live-streaming-in-your-home/