Code injection

2021-08-1222:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.1%

JSON

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon.

CPENameOperatorVersion
eg25-g_firmwarele202006130814 

CPE	Name	Operator	Version
	eg25-g_firmware	le	202006130814

References

nns.ee/blog/2021/04/03/modem-rce.html