CVE-2020-16205

State: Published
Severity: Not scored
Published: Aug 14, 2020
Updated: Aug 4, 2024
Reserved: Jul 31, 2020

Description

Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5).

Scores

The record has no CVSS score.

Weaknesses

CWE-78 IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN OS COMMAND ('OS COMMAND INJECTION') CWE-78

Affected Products

Product	Versions
G-Cam and G-Coden/a	Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5Affected

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03
http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.