CVE-2018-17932

CRITICAL

JUUKO K-800 - Command Injection

Title source: llm
STIX 2.1

Description

JUUKO K-800 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.) is vulnerable to a replay attack and command forgery, which could allow attackers to replay commands, control the device, view commands, or cause the device to stop running.

Scores

CVSS v3 9.8
EPSS 0.0024
EPSS Percentile 46.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-294
Status published
Products (1)
juuko/k-800_firmware
Published Nov 02, 2020
Tracked Since Feb 18, 2026