Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-6321

Owlet Camera OS command injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Bitdefender

Description

A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Owlet Cam v2

Default version status: unaffected

  • 0 to < 4.2.10affected

Owlet Cam v1

Default version status: unaffected

  • 0 to < 4.2.11affected

References