Gopro Gopro Hero Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Gopro Gopro Hero Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2014-6433 — CVSS 10.0 (critical): gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the (1) a1 or (2) a2 parameter in a start action.
• CVE-2014-6434 — CVSS 10.0 (critical): gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (1) a1 or (2) a2 parameter in a restart action.