CVE-2020-28593

A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2020-28593

A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2020-28593

Summary: CVE-2020-28593 affects Cosori Smart 5.8-Quart Air Fryer CS158-AF (version 1.1.0) and is exploitable via an unauthenticated backdoor in the device’s configuration server. Multiple sources describe that a specially crafted JSON object can trigger remote code execution after the device regi...