PatchTheCVE: pf-103 firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-17364: The processCommandUploadLog() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.https://patchthecve.com/cve/CVE-2019-17364.htmlhttps://patchthecve.com/cve/CVE-2019-17364.htmlWed, 17 Jun 2026 02:23:48 +0000CRITICAL 9.8: The processCommandUploadLog() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.CVE-2019-16737: The processCommandSetMac() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.3https://patchthecve.com/cve/CVE-2019-16737.htmlhttps://patchthecve.com/cve/CVE-2019-16737.htmlWed, 17 Jun 2026 02:22:42 +0000CRITICAL 9.8: The processCommandSetMac() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.CVE-2019-16736: A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.https://patchthecve.com/cve/CVE-2019-16736.htmlhttps://patchthecve.com/cve/CVE-2019-16736.htmlWed, 17 Jun 2026 02:22:42 +0000CRITICAL 9.8: A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user.CVE-2019-16735: A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 https://patchthecve.com/cve/CVE-2019-16735.htmlhttps://patchthecve.com/cve/CVE-2019-16735.htmlWed, 17 Jun 2026 02:22:41 +0000CRITICAL 9.8: A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user.CVE-2019-16734: Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 alhttps://patchthecve.com/cve/CVE-2019-16734.htmlhttps://patchthecve.com/cve/CVE-2019-16734.htmlWed, 17 Jun 2026 02:22:41 +0000CRITICAL 9.8: Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.CVE-2019-16733: processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remohttps://patchthecve.com/cve/CVE-2019-16733.htmlhttps://patchthecve.com/cve/CVE-2019-16733.htmlWed, 17 Jun 2026 02:22:41 +0000CRITICAL 9.8: processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.CVE-2019-16732: Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackerhttps://patchthecve.com/cve/CVE-2019-16732.htmlhttps://patchthecve.com/cve/CVE-2019-16732.htmlWed, 17 Jun 2026 02:22:41 +0000HIGH 8.1: Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the root user.CVE-2019-16731: The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers thttps://patchthecve.com/cve/CVE-2019-16731.htmlhttps://patchthecve.com/cve/CVE-2019-16731.htmlWed, 17 Jun 2026 02:22:41 +0000HIGH 7.5: The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings.CVE-2019-16730: processCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remhttps://patchthecve.com/cve/CVE-2019-16730.htmlhttps://patchthecve.com/cve/CVE-2019-16730.htmlWed, 17 Jun 2026 02:22:41 +0000CRITICAL 9.8: processCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.