https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-27542.htmlhttps://patchthecve.com/cve/CVE-2020-27542.htmlWed, 17 Jun 2026 03:09:17 +0000MEDIUM 6.8: Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads configuration from QR code (including network settings). The static IP configuration from QR code is copied to the file /config/ip-static and after reboot data from this file is inserted into bash command (withouthttps://patchthecve.com/cve/CVE-2020-27541.htmlhttps://patchthecve.com/cve/CVE-2020-27541.htmlWed, 17 Jun 2026 03:09:17 +0000HIGH 7.5: Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast discovery UDP packet. Sending a packet of too small size will lead to an attempt of allocating buffer of negative size. As the result service AgentGreen will be terminated and started https://patchthecve.com/cve/CVE-2020-27540.htmlhttps://patchthecve.com/cve/CVE-2020-27540.htmlWed, 17 Jun 2026 03:09:17 +0000CRITICAL 9.8: Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1. The camera reads firmware update configuration from SD card file vc\version.json. fw-sign parameter and from this configuration is directly inserted into a bash command. Firmware update is run automathttps://patchthecve.com/cve/CVE-2020-27539.htmlhttps://patchthecve.com/cve/CVE-2020-27539.htmlWed, 17 Jun 2026 03:09:17 +0000CRITICAL 9.8: Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1. AgentUpdater service has a self-written HTTP parser and builder. HTTP parser has a heap buffer overflow (OOB write). In default configuration camera parses responses only from HTTPS URLs from config file, so vulnerable