Skip to content
OpenAdvisories
High · 7.0 CVE-2020-12487 EUVD-2020-4789GHSA-qgcp-q9v9-wfx5

Command Execution Vulnerability in ABE service

Published Dec 17, 2024 · Updated Dec 17, 2024 · Assigned by Vivo

Description

Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.

Affected products

VendorProductAffectedFixed
vivo ABE Versions earlier than 4.4.0.9 —

References