CVE-2014-6434 - gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (1) a1 or (2) a2 parameter in a restart action

HIGH

gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (1) a1 or (2) a2 parameter in a restart action

Published Oct 7, 2014

10.0

HIGH

CVSS 2.0

EPSS 3.17%

gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (1) a1 or (2) a2 parameter in a restart action.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
http://www.zerodayinitiative.com/advisories/ZDI-14-348/		x_refsource_MISC

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 7, 2014

Updated Aug 6, 2024

Reserved Sep 16, 2014

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a