← Vulnerability feed

Vulnerability record · CVE-2009-1807 · published 28 May 2009

CVE-2009-1807: Baofeng storm vulnerability

Baofeng · Storm

Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009.

9.3 CVSS 2.0 High EPSS 7.5% · top 5.7%
9.3CVSS 2.0 base score
7.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.cisrt.org/enblog/read.php?245 Exploit
http://www.vupen.com/english/advisories/2009/1392
http://www.cisrt.org/enblog/read.php?245 Exploit
http://www.vupen.com/english/advisories/2009/1392

Track CVE-2009-1807 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2009-2617Baofeng storm memory buffer overflow vulnerabilityStack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the sour…EPSS 5.6%9.3CVE-2009-1612Baofeng storm memory buffer overflow vulnerabilityStack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrar…EPSS 33%9.3CVE-2007-4943Baofeng storm memory buffer overflow vulnerabilityMultiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary co…EPSS 3.3%7.5CVE-2007-4816Baofeng storm memory buffer overflow vulnerabilityMultiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long (1) URL, (2) b…EPSS 9.2%

Source: NIST National Vulnerability Database (record CVE-2009-1807), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.