CVE-2019-16733

processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-12-13

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Pf-103 Firmware (Petwant)
• Petalk Ai Firmware (Skymee)

References

• https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3