by Kastro
Paper/Archive/CVE-2023-38025

CVE-2023-38025

SPOTCAM CO., LTD. SpotCam FHD 2 — SpotCam Co., Ltd. SpotCamFHD - Command Injection -1

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 75.6.756 × 2015.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to arbitrary system commands or disrupt service.

Affected

ProductAffectedFixed inSource
SpotCam FHD 21.0036–CNA
spotcam_fhd21.0036–CISA-ADP

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reftwcert.org.tw/tw/cp-132-7332-ee011-1.html