Description
OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://jvn.jp/en/jp/JVN19666251/index.html
Vendor Advisory x_refsource_misc
https://www.plathome.co.jp/software/vx2-v4-0-0/
Scores
CVSS v3
8.8
EPSS
0.0086
EPSS Percentile
53.8%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (1)
plathome/openblocks_iot_vx2_firmware
3.3.0 - 4.0.0
Published
Mar 04, 2020
Tracked Since
Feb 18, 2026