Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py via shell metacharacters in the htmlNtpServer parameter.
References
Link | Resource |
---|---|
https://sku11army.blogspot.com/2020/01/post-oak-traffic-systems-awam-bluetooth.html | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2020-02-17 04:15
Updated : 2024-02-28 17:28
NVD link : CVE-2020-9021
Mitre link : CVE-2020-9021
CVE.ORG link : CVE-2020-9021
JSON object : View
Products Affected
postoaktraffic
- awam_bluetooth_field_device
- awam_bluetooth_field_device_firmware
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')