Security Advisory

CVE-2020-28593

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-04-15 13:41:22
Last updated 2024-08-04 16:40:59
Assigner talos
CVSS score 8.1
State PUBLISHED

Description

A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability.