Vulnerability Details CVE-2018-15477
myStrom WiFi Switch V1 devices before 2.66 did not sanitize a parameter received from the cloud that was used in an OS command. Malicious servers were able to run operating system commands on the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2018-15477
-
cpe:2.3:h:mystrom:wifi_switch:v1
-
cpe:2.3:o:mystrom:wifi_switch_firmware:2.31