10

CVE-2019-16735

Exploit
A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Skymee ≫ Petalk Ai Firmware Version3.2.2.30
   Skymee ≫ Petalk Ai Version-
Petwant ≫ Pf-103 Firmware Version4.22.2.42
   Petwant ≫ Pf-103 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.39% 0.873
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3
Third Party Advisory
Exploit