Back to Database
Status published
Critical
CVE-2020-10208
Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx...
Vulnerability Description
Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows authenticated remote attackers to execute arbitrary commands with root user privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-10208
Credits & Attribution
No credits recorded in the NVD database.
More from amino
View All →CVE-2020-10210
Because of hard-coded SSH keys for the root user in...
Critical
9.8
CVE-2020-10209
Command Injection in the CPE WAN Management Protocol (CWMP) registration...
High
8.1
CVE-2020-10207
Use of Hard-coded Credentials in EntoneWebEngine in Amino Communications AK45x...
Critical
9.8
CVE-2020-10206
Use of a Hard-coded Password in VNCserver in Amino Communications...
Medium
4.4
Affected Vendor
amino
View all reports →Affected Software
ak45x firmware, ak5xx firmware, ak65x firmware, aria6xx firmware, aria7xx firmware, kami7b firmware
Vulnerable Versions:
Unknown
Timeline
Official Publish:
December 29th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.