EUVD-2026-75120Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from Vendor (mitre) · only source for this CVE.
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/sh_for_telnet
AnalysisAI
SJRC F11 / SJ-GPS-PRO drones running firmware build 2019-09-17 expose an inetd service that spawns the helper binary /app/sh_for_telnet, giving anyone who can reach that port unauthenticated access to a shell and thus to sensitive data stored on the device (CWE-200). The flaw is remotely triggerable with no credentials or user interaction (CVSS 7.5, AV:N/PR:N/UI:N), but impact is limited to confidentiality — integrity and availability are unaffected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today