Record summary

CVE-2020-16205 has a selected CVSS score of 7.2 (high); EIP currently links 1 catalogued exploit.

Description

Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5).

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion rangeStatus

G-Cam and G-Code

CVE ListFirmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5affected

Proofs of concept

1

Catalogued exploits

MetasploitGeutebruck testaction.cgi Remote Command ExecutionMetasploit exploitby Davy DouhineNot analyzed1 file

Ruby

Metasploit

PoC details

References

3