cbcvebase.

Vtech Storio Max Firmware vulnerabilities

1 known vulnerability affecting vtech/storio_max_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2018-16618P2CRITICALCVSS 9.8fixed in 56.d3jm62019-06-19
CVE-2018-16618 [CRITICAL] CWE-78 CVE-2018-16618: VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Andr VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters followed by the name of an Android activity to start.
nvd
Vtech Storio Max Firmware vulnerabilities | cvebase