CVE-2019-16731

CVE-2019-16731 affects Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30) via the udpServerSys service, enabling remote attackers to initiate firmware upgrades and modify device settings. The Red Hat, NVD, CNVD, and CVE records consistently describe the same vulnerable component and imp...

CVE-2019-16731

The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings...

CVE-2019-16734

Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16734

CVE-2019-16734 affects Petwant PF-103 and Petalk AI with firmware versions 4.3.2.50 / 3.2.2.30, where the TELNET server uses default credentials, enabling remote attackers to execute arbitrary commands as root. Red Hat and other feeds corroborate the default-credential issue, describing it as a t...

CVE-2019-16732

The CVE-2019-16732 entry describes an unencrypted HTTP channel for firmware upgrades in Petalk AI and PF-103, enabling a man-in-the-middle to inject and execute arbitrary code with root privileges. Affected components are the firmware upgrade process on Petalk AI and PF-103 devices; root cause is...

CVE-2019-16735: Out-of-bounds Write

A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user...

CVE-2019-17364: Improper Neutralization of Special Elements used in an OS Command

The processCommandUploadLog function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16730: Improper Neutralization of Special Elements used in an OS Command

processCommandUpgrade in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16733: Improper Neutralization of Special Elements used in an OS Command

processCommandSetUid in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16737: Improper Neutralization of Special Elements used in an OS Command

The processCommandSetMac function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16731: Missing Authentication for Critical Function

The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings...

CVE-2019-16734: Use of Hard-coded Credentials

Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16732: Cleartext Transmission of Sensitive Information

Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the root user...

CVE-2019-16736: Out-of-bounds Write

A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user...

PT-2019-14798

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.22.2.42 Petalk AI version 3.2.2.30 Description The issue allows remote attackers to execute arbitrary system commands as the root user due to a problem in the processCommandUpgrade function in libcommon.so...

PT-2019-14800

Name of the Vulnerable Software and Affected Versions Petalk AI affected versions not specified PF-103 affected versions not specified Description The issue concerns unencrypted HTTP communications used for firmware upgrades, allowing man-in-the-middle attackers to execute arbitrary code with roo...

PT-2019-14799

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.22.2.42 Petalk AI version 3.2.2.30 Description The issue allows remote attackers to initiate firmware upgrades and alter device settings through the udpServerSys service. Recommendations For Petwant PF-103...

PT-2019-14804

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.22.2.42 Petalk AI version 3.2.2.30 Description A stack-based buffer overflow issue exists in the processCommandUploadSnapshot function within libcommon.so. This allows remote attackers to potentially cause a...

PT-2019-14803

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware versions 4.22.2.42 Petalk AI versions 3.2.2.30 Description A stack-based buffer overflow issue exists in the processCommandUploadLog function within libcommon.so. This allows remote attackers to potentially cause a deni...

PT-2019-14802

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.3.2.50 Petalk AI version 3.2.2.30 Description The issue allows remote attackers to execute arbitrary system commands as the root user due to the use of default credentials for the TELNET server. Recommendation...