CVE-2020-10209: Amino AK45X Firmware

High severity, CVSS 8.1. EPSS: 2.8% chance of exploitation in the next 30 days.

Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows man-in-the-middle attackers to execute arbitrary commands with root level privileges.

Affected products

• Amino AK45X Firmware: affected versions not specified
• Amino AK5XX Firmware: affected versions not specified
• Amino AK65X Firmware: affected versions not specified
• Amino ARIA6XX Firmware: affected versions not specified
• Amino ARIA7XX Firmware: affected versions not specified
• Amino KAMI7B Firmware: affected versions not specified

Published 2020-12-30. Last modified 2026-06-17.