VULNERABILITY INTELLIGENCE
CVE-2009-1807
CVSS score9.3 HIGH
EPSS probability7.53%
CISA KEVNot currently listed
Published2009-05-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009.