Description
The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atelmo | Atemio AM 520 HD Full HD Satellite Receiver | ≤ TitanNit 2.01 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
Andrysqui/CVE-2024-9166 ★ 4 · Sep 26, 2024
A vulnerability scanner that searches for the CVE-2024-9166 vulnerability on websites, more info about this vulnerability here: https://www.tenable.com/cve/CVE-2024-9166
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution http/cves/2024/CVE-2024-9166.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- ICSA-24-270-03 Atelmo Atemio AM 520 HD Full HD Satellite Receiver CISA ICS & IT advisories · Sep 26, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-03 government-resource