CVE-2020-9021

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p81

Published

Feb 17, 2020 (Feb 17, 2020)

Modified

Jun 17, 2026

Description

Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py via shell metacharacters in the htmlNtpServer parameter.

Vendors: postoaktraffic
Products: awam bluetooth field device firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.