CVE-2019-17364

The processCommandUploadLog function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-17364

CVE-2019-17364 affects Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30, where the function processCommandUploadLog() in libcommon.so allows remote attackers to execute arbitrary system commands as the root user. This yields a critical (CVSS v3.1: 9.8) impact with network access, no privi...

CVE-2019-16730

processCommandUpgrade in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16730

This CVE (CVE-2019-16730) affects Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30. The vulnerability resides in processCommandUpgrade() inside libcommon.so, which allows remote attackers to execute arbitrary system commands as root. The issue is network-exploitable, with high impact on c...

CVE-2019-16733

The CVE-2019-16733 entry describes a root-level command injection in Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30) via processCommandSetUid() in libcommon.so. Exploitation details are not publicly provided in the available documents, but NVD assigns a CVSSv3.1 base score of 9.8 (CR...

CVE-2019-16737

The processCommandSetMac function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16737

Affects Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30. The libcommon.so function processCommandSetMac() can be triggered remotely to execute arbitrary commands as root, due to a vulnerable implementation in the command handling. The CVE entry records high-severity impact (remote, no au...

CVE-2019-16731

The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings...

CVE-2019-16731

CVE-2019-16731 affects Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30) via the udpServerSys service, enabling remote attackers to initiate firmware upgrades and modify device settings. The Red Hat, NVD, CNVD, and CVE records consistently describe the same vulnerable component and imp...

CVE-2019-16734

Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16734

CVE-2019-16734 affects Petwant PF-103 and Petalk AI with firmware versions 4.3.2.50 / 3.2.2.30, where the TELNET server uses default credentials, enabling remote attackers to execute arbitrary commands as root. Red Hat and other feeds corroborate the default-credential issue, describing it as a t...

CVE-2019-16732

The CVE-2019-16732 entry describes an unencrypted HTTP channel for firmware upgrades in Petalk AI and PF-103, enabling a man-in-the-middle to inject and execute arbitrary code with root privileges. Affected components are the firmware upgrade process on Petalk AI and PF-103 devices; root cause is...

PT-2019-14803

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware versions 4.22.2.42 Petalk AI versions 3.2.2.30 Description A stack-based buffer overflow issue exists in the processCommandUploadLog function within libcommon.so. This allows remote attackers to potentially cause a deni...

PT-2019-14802

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.3.2.50 Petalk AI version 3.2.2.30 Description The issue allows remote attackers to execute arbitrary system commands as the root user due to the use of default credentials for the TELNET server. Recommendation...

PT-2019-14801

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.22.2.42 Petalk AI version 3.2.2.30 Description The issue allows remote attackers to execute arbitrary system commands as the root user due to a problem in the processCommandSetUid function within libcommon.so...

PT-2019-14800

Name of the Vulnerable Software and Affected Versions Petalk AI affected versions not specified PF-103 affected versions not specified Description The issue concerns unencrypted HTTP communications used for firmware upgrades, allowing man-in-the-middle attackers to execute arbitrary code with roo...

PT-2019-14798

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.22.2.42 Petalk AI version 3.2.2.30 Description The issue allows remote attackers to execute arbitrary system commands as the root user due to a problem in the processCommandUpgrade function in libcommon.so...

PT-2019-14804

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.22.2.42 Petalk AI version 3.2.2.30 Description A stack-based buffer overflow issue exists in the processCommandUploadSnapshot function within libcommon.so. This allows remote attackers to potentially cause a...

PT-2019-14799

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.22.2.42 Petalk AI version 3.2.2.30 Description The issue allows remote attackers to initiate firmware upgrades and alter device settings through the udpServerSys service. Recommendations For Petwant PF-103...

PT-2019-15105

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.22.2.42 Petalk AI version 3.2.2.30 Description The issue allows remote attackers to execute arbitrary system commands as the root user due to a problem in the processCommandUploadLog function of libcommon.so...