postoaktraffic vulnerabilities

Products

• awam bluetooth field device firmware 1
• awam bluetooth reader 1

Latest postoaktraffic CVEs

Newest publication first

1. CVE-2020-9021 Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py...

   Published 2020-02-17

   Critical·CVSS 9.8 EPSS 2.1%

   Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py via shell metacharacters in the htmlNtpServer parameter.

2. CVE-2012-4687 Post Oak Bluetooth Traffic Systems Insufficient Entropy

   Published 2012-12-08

   High·CVSS 7.6 EPSS 1.5%

   Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.