VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Sep 19, 2019· Updated Jun 17, 2026

CVE-2019-16398

CVE-2019-16398

Description

On Keeper K5 20.1.0.25 and 20.1.0.63 devices, remote code execution can occur by inserting an SD card containing a file named zskj_script_run.sh that executes a reverse shell.

Affected products

4
  • Keeper/K5 Firmware2 versions
    cpe:2.3:o:keeper:k5_firmware:20.1.0.25:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:keeper:k5_firmware:20.1.0.25:*:*:*:*:*:*:*
    • cpe:2.3:o:keeper:k5_firmware:20.1.0.63:*:*:*:*:*:*:*
  • Keeper/K5description
  • Keeper/K5llm-create
    Range: 20.1.0.25, 20.1.0.63

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.