What is CVE-2024-9166?

CVE-2024-9166 is a vulnerability in Atelmo Atemio Am 520 Hd Full Satellite Receiver, classified under OS Command Injection. Published 2024-09-26.

Is CVE-2024-9166 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Atelmo Atemio Am 520 Hd Full Satellite Receiver

CVE-2024-9166

The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.

Affected products

Atelmo Atemio Am 520 Hd Full Satellite Receiver — versions 0

Weakness classification (CWE)

CWE-78 — OS Command Injection

Public proof-of-concept exploits

Andrysqui/CVE-2024-9166
ANG13T/aerospace-cve-list
fkie-cad/nvd-json-data-feeds
nomi-sec/PoC-in-GitHub

References

ics-cert@hq.dhs.gov (government-resource)

Frequently asked questions

What is CVE-2024-9166?: CVE-2024-9166 is a vulnerability in Atelmo Atemio Am 520 Hd Full Satellite Receiver, classified under OS Command Injection. Published 2024-09-26.
Is CVE-2024-9166 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.