CVE-2018-20342

MEDIUM

Floureon SP012 - Unauthenticated Root Shell Access via UART Serial Interface

Title source: llm
STIX 2.1

Description

The Floureon IP Camera SP012 provides a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges.

References (3)

Core 3
Core References
Third Party Advisory
https://neolex-security.fr/blog/7/
Exploit, Third Party Advisory x_refsource_misc
https://neolex-security.fr/blog/8/

Scores

CVSS v3 6.8
EPSS 0.0060
EPSS Percentile 44.2%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-287
Status published
Products (1)
floureon/sp012
Published Dec 21, 2018
Tracked Since Feb 18, 2026