CVE-2020-22007 - OS Command Injection vulnerability in OKER G955V1 v1.03.02.20161128, allows physical attackers to interrupt the boot sequence and execute arbitrary commands with root privileges

Back Back to CVE browser

MEDIUM

OS Command Injection vulnerability in OKER G955V1 v1.03.02.20161128, allows physical attackers to interrupt the boot sequence and execute arbitrary commands with root privileges

Published Jan 18, 2023

6.8

MEDIUM

CVSS 3.1

EPSS 2.25%

Description

OS Command Injection vulnerability in OKER G955V1 v1.03.02.20161128, allows physical attackers to interrupt the boot sequence and execute arbitrary commands with root privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (4)

http://www.okerthai.com
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-14773
Advisory
https://gist.github.com/tanprathan/69fbf6fbac11988e12f44069ec5b18ea#file-cve-2020-22007-txt
Third Party Advisory
https://www.dropbox.com/s/cnzwbxhxl0ahzoa/OKER_UART_2.mp4
ExploitThird Party Advisory

Link	Providers	Tags
http://www.okerthai.com		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-14773		Advisory
https://gist.github.com/tanprathan/69fbf6fbac11988e12f44069ec5b18ea#file-cve-2020-22007-txt		Third Party Advisory
https://www.dropbox.com/s/cnzwbxhxl0ahzoa/OKER_UART_2.mp4		ExploitThird Party Advisory