Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-38027 EUVD-2023-41854GHSA-xvj2-9xh2-gvhq

SpotCam Co., Ltd. SpotCam Sense - Command Injection

Published Aug 28, 2023 · Updated Oct 14, 2024 · Assigned by twcert

Description

SpotCam Co., Ltd. SpotCam Sense’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to perform arbitrary system commands or disrupt service.

Affected products

VendorProductAffectedFixed
SPOTCAM SpotCam Sense 2.2044 —

References