CVE-2019-17364
CRITICALPetalk AI and Petwant PF-103 Firmware - Remote Code Execution via processCommandUploadLog()
Title source: llmDescription
The processCommandUploadLog() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3
Scores
CVSS v3
9.8
EPSS
0.0365
EPSS Percentile
88.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (2)
petwant/pf-103_firmware
4.22.2.42
skymee/petalk_ai_firmware
3.2.2.30
Published
Dec 13, 2019
Tracked Since
Feb 18, 2026