Riskcovery

CVE-2020-8171

State
Published
Severity
Not scored
Published
May 26, 2020
Updated
Aug 4, 2024
Reserved
Jan 28, 2020

Read the record on cve.org

Description

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to command injection. It is possible to craft an input string that passes the filter check but still contains commands, resulting in remote code execution.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-77 Command Injection - Generic (CWE-77)

Affected Products

ProductVersions
AirMax AirOS for TI, XW and XM boardsn/a
  • Affected firmware versions are v6.2.0 and priorAffected
  • Fixed firmware version v6.3.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.