Arbitrary OS Command Execution via Clock Settings in HOME SPOT CUBE2 Firmware V101 and Earlier

Arbitrary OS Command Execution via Clock Settings in HOME SPOT CUBE2 Firmware V101 and Earlier

CVE-2017-2183 · MEDIUM Severity

AV:A/AC:L/AU:S/C:P/I:P/A:P

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.

Learn more about our Web Application Penetration Testing UK.