PT-2023-11608 · Unknown · Oker G955V1

Prathan Phongthiproek · Publicado 2023-01-18 · Atualizado 2023-01-25 · CVE-2020-22007

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OKER G955V1 version 1.03.02.20161128

Description The issue allows physical attackers to interrupt the boot sequence and execute arbitrary commands with root privileges. This is due to an OS Command Injection vulnerability.

Recommendations For OKER G955V1 version 1.03.02.20161128, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2020-22007

Produtos afetados

Oker G955V1

Referências · 8

• 🔥 https://gist.github.com/tanprathan/69fbf6fbac11988e12f44069ec5b18ea#file-cve-2020-22007-txt · Exploit
• 🔥 https://dropbox.com/s/cnzwbxhxl0ahzoa/OKER_UART_2.mp4 · Exploit
• http://okerthai.com · Aviso do Fabricante
• https://t.me/cibsecurity/56667 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2020-22007 · Aviso do Fabricante
• https://t.me/cvenotify/42836 · Publicação no Telegram
• https://t.me/cvenotify/42273 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2020-22007 · Nota de Segurança