Amino Communications Command Injection Vulnerability

The Amino Communications AK45x series is a family of television set-top box devices from Amino UK. Amino Communications suffers from a command injection vulnerability that can be exploited by an authenticated, remote attacker to execute arbitrary commands with root user privileges...

Amino Communications Command Injection Vulnerability (CNVD-2021-29989)

The Amino Communications AK45x series is a family of television set-top box devices from Amino UK. Amino Communications suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands with root-level privileges...

Command injection

Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows authenticated remote attackers to execute arbitrary commands with root user privileges...

Hardcoded credentials

Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact with the video output of the device...

Amino Communications 命令注入漏洞

The Amino Communications AK45x series is a family of television set-top box devices from Amino UK. Amino Communications suffers from a command injection vulnerability that can be exploited by an authenticated, remote attacker to execute arbitrary commands with root user privileges...

多款Amino产品信任管理问题漏洞

The Amino Communications AK45x series, among others, is a family of television set-top box devices from Amino UK. Amino Communications has a trust management issue vulnerability that stems from the use of hard-coded passwords, which can be exploited by a local attacker to view and interact with t...

CVE-2020-10208

CVE-2020-10208 affects Amino Communications EntoneWebEngine used in AK45x, AK5xx, AK65x, Aria6xx, Aria7/AK7Xx series, and Kami7B. The vulnerability is a command-injection flaw that allows an authenticated remote attacker to execute arbitrary commands with root privileges. The initial sources spec...

Hardcoded credentials

Use of Hard-coded Credentials in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows remote attackers to retrieve and modify the device settings...

CVE-2020-10210

CVE-2020-10210 affects Amino Communications devices including AK45x, AK5xx, AK65x, Aria6xx, Aria7/AK7Xx, and Kami7B. The root cause is a hard-coded SSH key for the root user, which may allow an attacker to log in remotely via SSH. The public documents state this vulnerability enables remote SSH a...