Vulnerabilities > CVE-2020-22007 - Missing Authorization vulnerability in Okerthai G955V1 Firmware 1.03.02.20161128

047910
CVSS 6.8 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
okerthai
CWE-862
NVD
Published: 2023-01-18
Updated: 2024-11-21

Summary

OS Command Injection vulnerability in OKER G955V1 v1.03.02.20161128, allows physical attackers to interrupt the boot sequence and execute arbitrary commands with root privileges.

Vulnerable Configurations

Part Description Count
OS
Okerthai
1
Hardware
Okerthai
1

Common Weakness Enumeration (CWE)

References