CVE-2024-9166

The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - ics-cert@hq.dhs.gov

Published

2024-09-26

Last modified

2024-09-26

Weaknesses

CWE-78

Affected products

• Atemio Am 520 Hd Firmware (Atelmo)
• Atemio Am 520 Hd Full Hd Satellite Receiver (Atelmo)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-03