Amino Communications Command Injection Vulnerability (CNVD-2021-29989)

The Amino Communications AK45x series is a family of television set-top box devices from Amino UK. Amino Communications suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands with root-level privileges...

Amino Communications Command Injection Vulnerability

The Amino Communications AK45x series is a family of television set-top box devices from Amino UK. Amino Communications suffers from a command injection vulnerability that can be exploited by an authenticated, remote attacker to execute arbitrary commands with root user privileges...

Hardcoded credentials

Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact with the video output of the device...

Command injection

Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows authenticated remote attackers to execute arbitrary commands with root user privileges...

Amino Communications command injection vulnerability

The Amino Communications AK45x series is a family of television set-top box devices from Amino UK. Amino Communications suffers from a command injection vulnerability that can be exploited by an authenticated, remote attacker to execute arbitrary commands with root user privileges...

Multiple Amino products have vulnerabilities in trust management.

The Amino Communications AK45x series, among others, is a family of television set-top box devices from Amino UK. Amino Communications has a trust management issue vulnerability that stems from the use of hard-coded passwords, which can be exploited by a local attacker to view and interact with t...

CVE-2020-10208

CVE-2020-10208 affects Amino Communications EntoneWebEngine used in AK45x, AK5xx, AK65x, Aria6xx, Aria7/AK7Xx series, and Kami7B. The vulnerability is a command-injection flaw that allows an authenticated remote attacker to execute arbitrary commands with root privileges. The initial sources spec...

Hardcoded credentials

Use of Hard-coded Credentials in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows remote attackers to retrieve and modify the device settings...

CVE-2020-10210

CVE-2020-10210 affects Amino Communications devices including AK45x, AK5xx, AK65x, Aria6xx, Aria7/AK7Xx, and Kami7B. The root cause is a hard-coded SSH key for the root user, which may allow an attacker to log in remotely via SSH. The public documents state this vulnerability enables remote SSH a...

CVE-2020-10206: Use of Hard-coded Credentials

Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact with the video output of the device...

CVE-2020-10209: Improper Neutralization of Special Elements used in an OS Command

Command Injection in the CPE WAN Management Protocol CWMP registration in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows man-in-the-middle attackers to execute arbitrary commands with root level privileges...

CVE-2020-10208: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows authenticated remote attackers to execute arbitrary commands with root user privileges...

PT-2020-11973

Name of the Vulnerable Software and Affected Versions Amino Communications AK45x series Amino Communications AK5xx series Amino Communications AK65x series Amino Communications Aria6xx series Amino Communications Aria7/AK7Xx series Amino Communications Kami7B Description The issue concerns the us...

PT-2020-11972

Name of the Vulnerable Software and Affected Versions Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B affected versions not specified Description The issue is related to the use of a hard-coded password in VNCserver, allowing local...

PT-2020-11976

Name of the Vulnerable Software and Affected Versions Amino Communications AK45x series Amino Communications AK5xx series Amino Communications AK65x series Amino Communications Aria6xx series Amino Communications Aria7/AK7Xx series Amino Communications Kami7B Description The issue allows an...

CVE-2020-10210: Use of Hard-coded Credentials

Because of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series, Kami7B, an attacker may remotely log in through SSH...

PT-2020-11975

Name of the Vulnerable Software and Affected Versions Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B affected versions not specified Description The issue concerns a Command Injection in the CPE WAN Management Protocol CWMP registratio...