CVE-2018-19025

In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.).

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2020-11-02

Last modified

2024-08-05

Weaknesses

CWE-294

Affected products

• K-808 Firmware (Juuko)

References

• https://us-cert.cisa.gov/ics/advisories/icsa-20-301-01