PT-2009-4272 · Baofeng · Baofeng

Published 2009-05-28 · Updated 2009-06-09 · CVE-2009-1807

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Baofeng products version 3.09.04.17 and earlier

Description: The issue allows remote attackers to execute arbitrary code by calling the SetAttributeValue method. This has been exploited in the wild in April and May 2009.

Recommendations: For versions 3.09.04.17 and earlier, as a temporary workaround, consider disabling the SetAttributeValue method until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2009-1807

Affected Products

Baofeng

References · 4

• 🔥 https://exploit-db.com/exploits/8757 · Exploit
• 🔥 http://cisrt.org/enblog/read.php?245 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1807 · Security Note
• http://vupen.com/english/advisories/2009/1392 · Note