RCE in Atelmo Atemio Am 520 Hd Full Satellite Receiver
CVE-2024-9166
The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
EPSS exploit prediction
EPSS: 0.016 (74.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 75th percentile — 74.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.016 · newest: 0.016 · change: 0.000
Affected products
- Atelmo Atemio Am 520 Hd Full Satellite Receiver — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.cisa.gov/news-events/ics-advisories/icsa-24-270-03 (government-resource)
Frequently asked questions
- What is CVE-2024-9166?
- CVE-2024-9166 is a vulnerability in Atelmo Atemio Am 520 Hd Full Satellite Receiver, classified under OS Command Injection. Published 2024-09-26.
- Is CVE-2024-9166 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.