PT-2019-14802 · Petwant+1 · Petwant Pf-103+1

Publicado 2019-12-13 · Atualizado 2021-07-26 · CVE-2019-16734

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.3.2.50 Petalk AI version 3.2.2.30

Description The issue allows remote attackers to execute arbitrary system commands as the root user due to the use of default credentials for the TELNET server.

Recommendations For Petwant PF-103 firmware version 4.3.2.50, change the default TELNET credentials to prevent unauthorized access. For Petalk AI version 3.2.2.30, update the TELNET server configuration to use secure credentials instead of default ones.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2019-16734

Produtos afetados

Petalk Ai

Petwant Pf-103

Referências · 4

• 🔥 https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3 · Exploit
• https://t.me/cibsecurity/26519 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-16734 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-16734 · Aviso do Fabricante