Filtered by vendor Svakom Subscriptions
Filtered by product Svakom Siime Eye Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-11920 1 Svakom 3 Siime Eye, Siime Eye Firmware, Svakom Siime Eye 2024-08-04 9.8 Critical
An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in the HOST/IP section of the NFS settings menu in the webserver running on the device. By injecting Bash commands via shell metacharacters here, the device executes arbitrary code with root privileges (all of the device's services are running as root).