Описание
Command injection vulnerabilities in Aqara Camera Hub G3 4.1.9_0027 allow attackers to execute arbitrary commands with root privileges through malicious QR codes during device setup and factory reset.
Ссылки
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:aqara:camera_hub_g3_firmware:4.1.9_0027:*:*:*:*:*:*:*
cpe:2.3:h:aqara:camera_hub_g3:-:*:*:*:*:*:*:*
EPSS
Процентиль: 22%
0.00072
Низкий
6.6 Medium
CVSS3
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 6.6
github
около 2 месяцев назад
Command injection vulnerabilities in Aqara Camera Hub G3 4.1.9_0027 allow attackers to execute arbitrary commands with root privileges through malicious QR codes during device setup and factory reset.
EPSS
Процентиль: 22%
0.00072
Низкий
6.6 Medium
CVSS3
Дефекты
CWE-77