Vulnerability CVE-2018-19025


Published: 2020-11-02   Modified: 2020-11-03

Description:
In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.).

Type:

CWE-294

(Authentication Bypass by Capture-replay)

 References:
https://us-cert.cisa.gov/ics/advisories/icsa-20-301-01

Copyright 2024, cxsecurity.com

 

Back to Top