CVE-2020-22007
MediumCVSS 6.8Exploitation Probability (EPSS)
High risk81th percentile - higher than 81% of all known CVEs
Summary
An OS Command Injection vulnerability was found in OKER G955V1 firmware version v1.03.02.20161128. A physical attacker can interrupt the boot sequence and execute arbitrary commands with root privileges.
Risk Assessment
The risk involves full device compromise by an attacker with physical access. The attacker could install malware, alter configuration, or permanently damage the system.
Recommendation
Immediately update the device firmware to the latest available version. If no update is available, restrict physical access to the device and implement boot process security measures.
Original NVD description (English source)
OS Command Injection vulnerability in OKER G955V1 v1.03.02.20161128, allows physical attackers to interrupt the boot sequence and execute arbitrary commands with root privileges.