CVE-2018-19025

In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc...

CVE-2018-19025

creationtimestamp| type| source ---|---|--- 2022-08-25 17:00:06+00:00| seen| https://t.me/poxek/2363...

CVE-2018-19025

CVE-2018-19025 affects JUUKO K-808 (and related JUUKO hardware). A vulnerability exists in the handling of radio data between transmitter and receiver that allows an attacker to craft a packet encoding an arbitrary command, enabling command injection on vulnerable installations. Red Hat/ZDI and I...