CVE Feed

    Dashboard / CVE / CVE-2019-20348

    CVE-2019-20348

    OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to interrupt the boot sequence in order to execute arbitrary commands with root privileges and conduct further attacks.

    Published:Jan 6, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 6, 2020
    EPSS Score:0.00138
    CVSS Score:6.8

    Affected Products

    Vendor
    Okerthai
    Product
    G232v1
    Vendor
    Okerthai
    Product
    G232v1 Firmware

    Exploits

    https://gist.github.com/tanprathan/24cab2eb02937f86961c6380b47ce385https://gist.github.com/tanprathan/24cab2eb02937f86961c6380b47ce385

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High