CVE-2019-16731

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3Exploit, Third Party Advisory
https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3Exploit, Third Party Advisory

Timeline

Published: Dec 13, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-167328.1Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the CVE-2019-167339.8processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitr CVE-2019-167349.8Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execu CVE-2019-167359.8A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows CVE-2019-167369.8A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 al CVE-2019-167379.8The processCommandSetMac() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to e CVE-2019-167385.3In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.CVE-2019-16748.8A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an auth CVE-2019-167438.8eBrigade before 5.0 has evenement_ical.php evenement SQL Injection.CVE-2019-167448.8eBrigade before 5.0 has evenements.php cid SQL Injection.CVE-2019-167458.8eBrigade before 5.0 has evenement_choice.php chxCal SQL Injection.CVE-2019-167469.8An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a