CVE-2022-36779

🗓️ 13 Sep 2022 14:57:52Reported by INCDType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 89 Views

PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-

Reporter	Title	Published	Views	Family All 11
GithubExploit	Exploit for OS Command Injection in Proscend M330-W_Firmware	24 Dec 202310:46	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Proscend M330-W_Firmware	3 Jun 202422:25	–	githubexploit
ATTACKERKB	CVE-2022-36779	21 Aug 202211:14	–	attackerkb
Circl	CVE-2022-36779	13 Sep 202218:25	–	circl
CNNVD	PROSCEND Industrial Cellular Router 操作系统命令注入漏洞	13 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-36779 PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection	13 Sep 202214:57	–	cvelist
Japan Vulnerability Notes	JVN#23835228: Proscend Communications M330-W and M330-W5 vulnerable to OS command injection	16 Apr 202400:00	–	jvn
Japan Vulnerability Notes	Proscend Communications M330-W and M330-W5 vulnerable to OS command injection	16 Apr 202405:30	–	jvn
NVD	CVE-2022-36779	13 Sep 202215:15	–	nvd
Prion	Command injection	13 Sep 202215:15	–	prion

NVD

Node

proscend m330-w_firmwareRange<1.11

AND

proscend m330-wMatch-

Node

proscend m330-w5_firmwareRange<1.11

AND

proscend m330-w5Match-

Node

proscend m350-5g_firmwareRange<1.02

AND

proscend m350-5gMatch-

Node

proscend m350-w5g_firmwareRange<1.02

AND

proscend m350-w5gMatch-

Node

proscend m350-6_firmwareRange<1.02

AND

proscend m350-6Match-

Node

proscend m350-w6_firmwareRange<1.02

AND

proscend m350-w6Match-

Node

proscend m301-g_firmwareRange<2.20

AND

proscend m301-gMatch-

Node

proscend m301-gw_firmwareRange<2.20

AND

proscend m301-gwMatch-

Node

advice icr_111wg_firmwareRange<1.11

AND

advice icr_111wgMatch-

[
  {
    "product": "PROSCEND M330-w / M330-W5",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V1.11*",
        "status": "affected",
        "version": "V1.11",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PROSCEND M350-5G / M350-W5G / M350-6 / M350-W6",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V1.02*",
        "status": "affected",
        "version": "V1.02",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PROSCEND M301-G / M301-GW",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V2.20*",
        "status": "affected",
        "version": "V2.20",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ADVICE ICR 111WG",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V1.11*",
        "status": "affected",
        "version": "V1.11",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
gov	www.gov.il/en/departments/faq/cve_advisories

21 Nov 2024 07:13Current

8.3High risk

Vulners AI Score8.3

CVSS 3.16.5 - 9.8

EPSS0.23202

CWE-78