CVE-2023-38027
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
SpotCam Sense has a hidden Telnet function that is vulnerable to OS command injection. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary system commands or disrupt service.
Risk Assessment
This vulnerability could lead to unauthorized access to the system and potential service disruption, posing a serious threat to organizational security.
Recommendation
It is recommended to disable the Telnet function and implement appropriate security measures to minimize the risk of command injection attacks.
Original NVD description (English source)
SpotCam Co., Ltd. SpotCam Sense’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to perform arbitrary system commands or disrupt service.