high8.8
CVE-2020-23160
Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devi…
Impact
Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pyres | Termod4 Firmware | before 10.04k |
References
- NVD record
- CVE.org record
- https://github.com/Outpost24/Pyrescom-Termod-PoC
- https://outpost24.com/blog/multiple-vulnerabilities-discovered-in-Pyrescom-Termod4-smart-device
- https://pyres.com/en/solutions/termod-4/
- https://github.com/Outpost24/Pyrescom-Termod-PoC
- https://outpost24.com/blog/multiple-vulnerabilities-discovered-in-Pyrescom-Termod4-smart-device
- https://pyres.com/en/solutions/termod-4/