Description
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card.
CVSS 6.8EPSS 0.117%Risk 0.69
View source- Published
- 2026-04-02 17:16:22
- Affected versions
- ==v20250721.1640
- Type
- Firmware
- Last modified
- 2026-07-24 21:10:00
- Vector
- CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H