CVE-2024-9166 — OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver

CVE-2024-9166

OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver PUBLISHED

Description (CNA)

The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.

Affected (CNA)

Vendor / product	Versions
Atelmo / Atemio AM 520 HD Full HD Satellite Receiver	affected 0 through TitanNit 2.01

CWE

CWE-78

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-03

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.