cve/2019/CVE-2019-17101.md

### [CVE-2019-17101](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17101)
![](https://img.shields.io/static/v1?label=Product&message=Smart%20Indoor%20Camera&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%204.2.5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-77%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20a%20Command%20('Command%20Injection')&color=brighgreen)

### Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions.

### POC

#### Reference
- https://labs.bitdefender.com/2020/04/cracking-the-netatmo-smart-indoor-security-camera/

#### Github
No PoCs found on GitHub currently.