Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-9166

OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Atelmo Atemio AM 520 HD Full HD Satellite Receiver

Default version status: unaffected

  • 0 to ≤ TitanNit 2.01affected

References