Atelmo Atemio AM 520 HD Full HD Satellite Receiver

Summary

Vulnerabilities 1

• Critical 9.3
  CVE-2024-9166 Public exploit Scanner template

  OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver

  The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.

  Atelmo Atemio AM 520 HD Full HD Satellite Receiver
  Sep 26, 2024

Revision history

1. 2024-09-26 #1

   Initial Publication

References

• ICSA Advisory ICSA-24-270-03 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-03
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014