Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-17395
HistoryJan 28, 2022 - 12:00 a.m.

Huawei AIS-BW80H-00 Command Injection Vulnerability

2022-01-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.0004 Low

EPSS

Percentile

12.8%

Huawei AIS-BW80H-00 is a smart speaker device from Huawei (China). Huawei AIS-BW80H-00 is vulnerable to a command injection vulnerability caused by the device’s inability to effectively defend against malicious outside interference. A local attacker could exploit the vulnerability to pass specially crafted data to the application and execute arbitrary commands on the target system.

CPENameOperatorVersion
Huawei AIS-BW80H-00 <9.eq0.3.4

0.0004 Low

EPSS

Percentile

12.8%

Related for CNVD-2022-17395