CVE-2019-16735

The CVE-2019-16735 issue affects Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30). It is a stack-based buffer overflow in libcommon.so::processCommandUploadLog, enabling remote attackers to cause denial of service or execute arbitrary code with root privileges. The available documents...

CVE-2019-17364

CVE-2019-17364 affects Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30, where the function processCommandUploadLog() in libcommon.so allows remote attackers to execute arbitrary system commands as the root user. This yields a critical (CVSS v3.1: 9.8) impact with network access, no privi...

CVE-2019-17364

The processCommandUploadLog function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16730

processCommandUpgrade in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16733

The CVE-2019-16733 entry describes a root-level command injection in Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30) via processCommandSetUid() in libcommon.so. Exploitation details are not publicly provided in the available documents, but NVD assigns a CVSSv3.1 base score of 9.8 (CR...

CVE-2019-16737

Affects Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30. The libcommon.so function processCommandSetMac() can be triggered remotely to execute arbitrary commands as root, due to a vulnerable implementation in the command handling. The CVE entry records high-severity impact (remote, no au...

CVE-2019-16734

Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16734

CVE-2019-16734 affects Petwant PF-103 and Petalk AI with firmware versions 4.3.2.50 / 3.2.2.30, where the TELNET server uses default credentials, enabling remote attackers to execute arbitrary commands as root. Red Hat and other feeds corroborate the default-credential issue, describing it as a t...

CVE-2019-16732

The CVE-2019-16732 entry describes an unencrypted HTTP channel for firmware upgrades in Petalk AI and PF-103, enabling a man-in-the-middle to inject and execute arbitrary code with root privileges. Affected components are the firmware upgrade process on Petalk AI and PF-103 devices; root cause is...

PT-2019-14805 · Petwant +1 · Libcommon.So +2

Name of the Vulnerable Software and Affected Versions: Petwant PF-103 firmware version 4.22.2.42 Petalk AI version 3.2.2.30 Description: The issue allows remote attackers to execute arbitrary system commands as the root user due to a problem in the processCommandSetMac function of libcommon.so...