CVE-2019-20348
Summary
| CVE | CVE-2019-20348 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-01-06 21:15:00 UTC |
| Updated | 2020-01-15 20:09:00 UTC |
| Description | OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to interrupt the boot sequence in order to execute arbitrary commands with root privileges and conduct further attacks. |
Risk And Classification
Problem Types: CWE-78
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Okerthai | G232v1 | - | All | All | All |
| Hardware | Okerthai | G232v1 | - | All | All | All |
| Operating System | Okerthai | G232v1 Firmware | 1.03.02.20161129 | All | All | All |
| Operating System | Okerthai | G232v1 Firmware | 1.03.02.20161129 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| OKER CVE-2019-20348 · GitHub | MISC | gist.github.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.