CVEvulnerability

CVE-2020-9021

9.8 CRITICAL Published 2020-02-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-02-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-78

Description

Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py via shell metacharacters in the htmlNtpServer parameter.

Affected configurations

• postoaktraffic awam bluetooth field device firmware 2011.3 • postoaktraffic awam bluetooth field device firmware 7400v2.02.01.2019 • postoaktraffic awam bluetooth field device firmware 7400v2.08.21.2018 • postoaktraffic awam bluetooth field device firmware 7800sd.2012.12.5 • postoaktraffic awam bluetooth field device firmware 7800sd.2015.1.16

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References