Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devices.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23160
Reference (s):
- https://github.com/Outpost24/Pyrescom-Termod-PoC
- https://outpost24.com/blog/multiple-vulnerabilities-discovered-in-Pyrescom-Termod4-smart-device
- https://pyres.com/en/solutions/termod-4/