What’s Vulnerable › Vulnerabilities
CVE-2024-9166: OS Command Injection in Atelmo Atemio AM 520 HD Full HD Satellite Receiver
- Severity: critical (CVSS 9.3 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-09-26 · updated 2026-06-17
- Weakness: CWE-78
Description
The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.
Affected products
- Atelmo Atemio Am 520 Hd Firmware: through titannit_2.01
References
Get alerted when CVE-2024-9166 or the next vulnerability affects your stack