Command injection

2023-08-2804:15:00

PRIOn knowledge base

www.prio-n.com

spotcam

telnet

vulnerability

command injection

remote attacker

arbitrary system commands

disrupt service

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.6%

JSON

SpotCam Co., Ltd. SpotCam Sense’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to perform arbitrary system commands or disrupt service.

CPENameOperatorVersion
sense_firmwarelt2.2046

CPE	Name	Operator	Version
	sense_firmware	lt	2.2046

References

www.twcert.org.tw/tw/cp-132-7334-351fb-1.html