CVE-2022-0365

🗓️ 04 Feb 2022 22:29:28Reported by icscertType

cve🔗 web.nvd.nist.gov👁 72 Views🌐 WEB

Authenticated OS command injection vulnerability in affected product

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-0365	16 Apr 202516:56	–	circl
CNNVD	Ricon Industrial Cellular Router S9922L 操作系统命令注入漏洞	1 Feb 202200:00	–	cnnvd
CNVD	Ricon Mobile Ricon Industrial Cellular Router S9922L and S9922XL OS Command Injection Vulnerability	10 Feb 202200:00	–	cnvd
Cvelist	CVE-2022-0365 Ricon Mobile, Inc.	4 Feb 202222:29	–	cvelist
EUVD	EUVD-2022-15520	3 Oct 202520:07	–	euvd
ICS	Ricon Mobile Industrial Cellular Router	1 Feb 202200:00	–	ics
NVD	CVE-2022-0365	4 Feb 202223:15	–	nvd
OSV	CVE-2022-0365	4 Feb 202223:15	–	osv
Prion	Command injection	4 Feb 202223:15	–	prion
Vulnrichment	CVE-2022-0365 Ricon Mobile, Inc.	4 Feb 202222:29	–	vulnrichment

NVD

Vulners

Node

riconmobile s9922l_firmwareMatch16.10.3

AND

riconmobile s9922lMatch-

Node

riconmobile s9922xl_firmwareMatch16.10.3

AND

riconmobile s9922xlMatch-

[
  {
    "product": "Industrial Cellular Router",
    "vendor": "Ricon",
    "versions": [
      {
        "status": "affected",
        "version": "S9922XL 16.10.3"
      },
      {
        "status": "affected",
        "version": "S9922L 16.10.3"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-032-01

Parameter	Position	Path	Description	CWE
ping_server_ip	request body	apply.cgi	Authenticated OS command injection via the ping_server_ip POST parameter	CWE-78

21 Nov 2024 06:38Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.1 - 9.8

CVSS 210

EPSS0.02419

SSVC

CWE-78