high8.1
CVE-2020-10209
Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria…
Impact
Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows man-in-the-middle attackers to execute arbitrary commands with root level privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amino | Ak45x Firmware | All versions |
| Amino | Ak5xx Firmware | All versions |
| Amino | Ak65x Firmware | All versions |
| Amino | Aria6xx Firmware | All versions |
| Amino | Aria7xx Firmware | All versions |
| Amino | Kami7b Firmware | All versions |