Vulnerabilities > Skymee > Petalk AI Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2019-12-13 CVE-2019-16732 Cleartext Transmission of Sensitive Information vulnerability in multiple products
Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the root user.
network
high complexity
skymee petwant CWE-319
8.1
2019-12-13 CVE-2019-16731 Missing Authentication for Critical Function vulnerability in multiple products
The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings.
network
low complexity
skymee petwant CWE-306
7.5