critical9.8
CVE-2023-38027
SpotCam Co., Ltd.
Impact
SpotCam Co., Ltd. SpotCam Sense’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to perform arbitrary system commands or disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myspotcam | Sense Firmware | before 2.2046 |