CVE-2015-9059

CRITICAL 9.8CVE-2015-9059 · Published 28/05/2017 · updated 17/06/2026

In short

CVE-2015-9059 is a CRITICAL (CVSS 9.8) vulnerability affecting picocom (picocom project).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
picocom picocom_project	`≤ 1.8`	No fix yet

Description

picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /bin/sh unsafely.

References

npat-efault/picocom commit 1ebc60b · Patch
lists.debian.org/debian-lts-announce/2020/06/msg00030.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free