critical9.8
CVE-2020-9021
Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operat…
Impact
Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py via shell metacharacters in the htmlNtpServer parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postoaktraffic | Awam Bluetooth Field Device Firmware | Versions 2011.3, 7400v2.02.01.2019, 7400v2.08.21.2018, 7800sd.2012.12.5, 7800sd.2015.1.16 |