CVE-2014-6433 gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the (1) a1 or (2) a2 parameter in a start action.
HighCVSS 10.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the (1) a1 or (2) a2 parameter in a start action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gopro hero firmware | = 3+ | No fix listed |
| gopro hero | = 3+ | No fix listed |