Approved changes feed: RSS · Atom

cpe:2.3:o:svakom:siime_eye_firmware:14.1.00000001.3.330.0.0.3.14:*:*:*:*:*:*:*

part: o version: 14.1.00000001.3.330.0.0.3.14 update: *

VendorSvakom (192b3f37-c101-5a30-9fb9-bbcc31d17ea8)
ProductSiime Eye Firmware (7fc85ece-80e0-5761-9494-fff0b3f669cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-11920 vulnerable 2026-06-08 05:17:55.232060 Details available
An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in the HOST/IP section of the NFS settings menu in the webserver running on the device. By injecting Bash commands via shell metacharacters here, the device executes arbitrary code with root privileges (all of the device's services are running as root).
Published: 2021-02-08T01:43:04.000Z
Updated: 2024-08-04T11:42:00.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11915 vulnerable 2026-06-08 05:17:55.227251 Details available
An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a set_params.cgi?telnetd=1&save=1&reboot=1 request to the webserver, it is possible to enable the telnet interface on the device. The telnet interface can then be used to obtain access to the device with root privileges via a reecam4debug default password. This default telnet password is the same across all Siime Eye devices. In order for the attack to be exploited, an attacker must be physically close in order to connect to the device's Wi-Fi access point.
Published: 2021-02-08T01:40:45.000Z
Updated: 2024-08-04T11:42:00.508Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.