Description
A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Owlet | Cam v2 | < 4.2.10 | 4.2.10 |
| Owlet | Cam v1 | < 4.2.11 | 4.2.11 |