OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver
63Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 9.3epss 1.6%
from disclosure to weapon0 days
Published on NVDSep 26
1st PoCSep 26
exploitation probability
1.6%top 27% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Atelmo · Atemio AM 520 HD Full HD Satellite Receiverpublic PoCs found — 1
githubgithub.com/Andrysqui/CVE-2024-9166★ 3⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.