CVE-2024-9166criticalCWE-78

CVE-2024-9166: critical vulnerability in Atelmo Atemio AM 520 HD Full HD Satellite…

OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver

Published

Follow this CVE+ Monitor Atemio AM 520 HD Full HD Satellite Receiver

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 9.3epss 1.6%
from disclosure to weaponsame day
Published on NVDSep 26
1st PoCSep 26
The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Atelmo · Atemio AM 520 HD Full HD Satellite Receiver
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.