critical9.9
CVE-2020-10208
Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows aut…
Impact
Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows authenticated remote attackers to execute arbitrary commands with root user privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amino | Ak45x Firmware | All versions |
| Amino | Ak5xx Firmware | All versions |
| Amino | Ak65x Firmware | All versions |
| Amino | Aria6xx Firmware | All versions |
| Amino | Aria7xx Firmware | All versions |
| Amino | Kami7b Firmware | All versions |