CVE-2020-9021

9.8 criticalEPSS 2.1%

Critical (9.8) in postoaktraffic awam bluetooth field device firmware. EPSS 2.1% chance of exploitation in the next 30 days.

Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py via shell metacharacters in the htmlNtpServer parameter.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2020-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

postoaktraffic:awam_bluetooth_field_device_firmware

References

https://sku11army.blogspot.com/2020/01/post-oak-traffic-systems-awam-bluetooth.html
https://sku11army.blogspot.com/2020/01/post-oak-traffic-systems-awam-bluetooth.html

Check your stack JSON