What is CVE-2020-9021?

CVE-2020-9021 is a critical-severity vulnerability in Postoaktraffic Awam Bluetooth Field Device, classified under OS Command Injection. CVSS score: 9.8/10. Published 2020-02-17.

How severe is CVE-2020-9021?

Critical severity. CVSS v3 base score is 9.8 out of 10.

RCE in Postoaktraffic Awam Bluetooth Field Device

CVE-2020-9021

Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py via shell metacharacters in the htmlNtpServer parameter.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.021 (79.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Postoaktraffic Awam_bluetooth_field_device
Postoaktraffic Awam_bluetooth_field_device_firmware — versions 2011.3, 7400v2.02.01.2019, 7400v2.08.21.2018
N/a — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-9021?: CVE-2020-9021 is a critical-severity vulnerability in Postoaktraffic Awam Bluetooth Field Device, classified under OS Command Injection. CVSS score: 9.8/10. Published 2020-02-17.
How severe is CVE-2020-9021?: Critical severity. CVSS v3 base score is 9.8 out of 10.