CVE Catalog
CVE-2014-6433
HighSummary
CVE-2014-6433 vulnerability in GoPro HERO 3+ allows remote attackers to execute arbitrary files via the a1 or a2 parameter in a start action.
Risk Assessment
Attackers can exploit this vulnerability to run malicious software on the device, potentially leading to data loss or device takeover.
Recommendation
It is recommended to update the GoPro HERO 3+ firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in GoPro HERO 3+
Original NVD description (English source)
gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the (1) a1 or (2) a2 parameter in a start action.