Kaiostech vulnerabilities
We track 1 vulnerability in Kaiostech products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 22, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Kaiostech vulnerabilities
- 9.8 Critical severity
Kaios: Improper Neutralization of Special Elements used in a Command
An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctweb_server binary exposes a local web server that responds to GET and POST requests on port 2929. The server accepts arbitrary Bash commands and executes them as root. Because it is not permis