Vulnerability · Published Aug 14, 2020 · Assigned by icscert
CVE-2020-16205
High 7.2
In plain English
A high-severity OS command injection in G-Cam and G-Code. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 61.1% (higher than 99.2% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.
Severity (CVSS NVD)7.2High
Exploit odds (30 days)61.1%top 0.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Metasploit
Official description
Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | G-Cam and G-Code | Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5 |
Weakness: CWE-78