Skip to content
OpenAdvisories
Medium · 6.9 CVE-2020-8101 EUVD-2020-29012GHSA-v354-qw54-4f78

Command execution due to unsanitized input in LifeShield DIY HD Video Doorbell

Published Feb 2, 2021 · Updated Sep 17, 2024 · Assigned by Bitdefender

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of ADT LifeShield DIY HD Video Doorbell allows an attacker on the same network to execute commands on the device. This issue affects: ADT LifeShield DIY HD Video Doorbell version 1.0.02R09 and prior versions.

Affected products

VendorProductAffectedFixed
ADT LifeShield DIY HD Video Doorbell unspecified – ≤ 1.0.02R09 —

References