VYPR

Storio Max

by vTech

CVEs (1)

  • CVE-2018-16618Jun 19, 2019
    risk 0.01cvss epss 0.08

    VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of…