Command Injection Vulnerability in QVidium Technologies Amino A140
CVE-2022-40021

9.8CRITICAL

Key Information:

Vendor

Qvidium

Status
Amino A140 Firmware
Vendor
CVE Published:
17 February 2023

What is CVE-2022-40021?

QVidium Technologies Amino A140 is affected by a command injection vulnerability that allows attackers to execute arbitrary commands on the device. This vulnerability exists in versions prior to firmware 1.0.0-283, potentially leading to unauthorized access and manipulation of the system. It poses risks to device integrity and security, making it crucial for users to upgrade to the latest firmware version to mitigate these threats.

References

https://www.securifera.com/advisories/CVE-2022-40021/

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.