CVE Catalog
CVE-2014-6434
HighSummary
gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via the (1) a1 or (2) a2 parameter in a restart action.
Risk Assessment
Attackers can remotely take control of the device, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in GoPro HERO 3+
Original NVD description (English source)
gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (1) a1 or (2) a2 parameter in a restart action.