CVE-2024-9166: OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver
The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9166?
CVE-2024-9166 is considered a critical vulnerability due to its potential for unauthorized access with elevated privileges.
How do I fix CVE-2024-9166?
To address CVE-2024-9166, apply the latest firmware update from Atelmo that mitigates the exploit through the 'getcommand' query.
What impact does CVE-2024-9166 have on the affected software?
CVE-2024-9166 allows an unauthorized attacker to execute system commands with root access, compromising the affected device's security.
Which devices are affected by CVE-2024-9166?
CVE-2024-9166 specifically affects the Atelmo Atemio AM 520 HD Full HD Satellite Receiver.
Is CVE-2024-9166 a remote exploit or local exploit?
CVE-2024-9166 is classified as a remote exploit, allowing attackers to gain elevated access without physical access to the device.