CVE-2020-15362

PoC —

CVSS 3.1

9.8 critical

EPSS

3%p84

Published

Jun 29, 2020 (Jun 29, 2020)

Modified

Jun 17, 2026

Description

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code.

Vendors: thingssdk
Products: wifiscanner
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.