Skymee Petalk Ai Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Skymee Petalk Ai Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2019-17364 — CVSS 9.8 (critical): The processCommandUploadLog() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers…
• CVE-2019-16737 — CVSS 9.8 (critical): The processCommandSetMac() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to…
• CVE-2019-16730 — CVSS 9.8 (critical): processCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute…
• CVE-2019-16733 — CVSS 9.8 (critical): processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute…
• CVE-2019-16734 — CVSS 9.8 (critical): Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to…
• CVE-2019-16735 — CVSS 9.8 (critical): A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows…
• CVE-2019-16736 — CVSS 9.8 (critical): A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30…
• CVE-2019-16732 — CVSS 8.1 (high): Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as…
• CVE-2019-16731 — CVSS 7.5 (high): The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades…