Command injection

2023-08-2804:15:00

PRIOn knowledge base

www.prio-n.com

spotcam

telnet

command injection

vulnerability

remote attacker

arbitrary commands

disrupt service

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.6%

JSON

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to arbitrary system commands or disrupt service.

CPENameOperatorVersion
fhd_2_firmwarelt1.0039

CPE	Name	Operator	Version
	fhd_2_firmware	lt	1.0039

References

www.twcert.org.tw/tw/cp-132-7332-ee011-1.html