| 제목 | Audi UTR Dashcam 2.0 Incorrect Use of Privileged APIs |
|---|
| 설명 | Execute Remote Commands - Using the Audi UTR APK, an attacker can obtain a list of remotely executable commands once logged on using weak/default credentials. For instance, getting userdata, calling for factory reset, or even trigger a malicious firmware update to "/sd/DSM_FW.muf". |
|---|
| 원천 | ⚠️ https://github.com/geo-chen/Audi/blob/main/README.md#finding-4-execute-remote-commands |
|---|
| 사용자 | geochen (UID 78995) |
|---|
| 제출 | 2025. 03. 03. PM 05:32 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 03. 20. AM 11:24 (17 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 300170 [Audi UTR Dashcam 2.0 Command API 권한 상승] |
|---|
| 포인트들 | 18 |
|---|