processCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.
References
Link | Resource |
---|---|
https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3 | Exploit Third Party Advisory |
https://www.securityevaluators.com/research/ | Not Applicable |
Configurations
History
No history.
Information
Published : 2019-12-13 21:15
Updated : 2024-02-28 17:28
NVD link : CVE-2019-16730
Mitre link : CVE-2019-16730
CVE.ORG link : CVE-2019-16730
JSON object : View
Products Affected
petwant
- pf-103_firmware
- pf-103
skymee
- petalk_ai_firmware
- petalk_ai
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')