Code injection

2009-05-2820:30:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.061 Low

EPSS

Percentile

93.6%

JSON

Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009.

CPENameOperatorVersion
stormeq2.7.9-10
stormeq2.9
stormle3.09.04.17
stormeq2.8
stormeq2.7.9-8

Name	Operator	Version
storm	eq	2.7.9-10
storm	eq	2.9
storm	le	3.09.04.17
storm	eq	2.8
storm	eq	2.7.9-8

References

www.cisrt.org/enblog/read.php?245

www.vupen.com/english/advisories/2009/1392