CVE-2024-9166: OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver
First published: Thu Sep 26 2024(Updated: )
The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.
Credit: ics-cert@hq.dhs.gov
Remedy
Atelmo has stated that this product has been discontinued. There are no service or support addresses that can be contacted. For more information, contact Atelmo https://www.atelmo.com/epages/Atelmo.sf/de_DE/ .
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/weakness
- agent/references
- agent/title
- agent/first-publish-date
- agent/description
- agent/type
- collector/nvd-api
- source/NVD
- agent/author
- agent/last-modified-date
- agent/severity
- agent/event
- collector/epss-latest
- source/FIRST
- agent/tags
- agent/epss