Lucene search

MitreCVE-2022-45711

HistoryDec 23, 2022 - 7:15 p.m.

CVE-2022-45711

2022-12-2319:15:11

CWE-78

mitre

web.nvd.nist.gov

cve-2022-45711

ip-com

m50

v15.11.0.33

command injection

hostname parameter

vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.8%

JSON

IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function.

Affected configurations

Nvd

Node

ip-comm50Match-

AND

ip-comm50_firmwareMatch15.11.0.33

VendorProductVersionCPE
ip-comm50-cpe:2.3:h:ip-com:m50:-:*:*:*:*:*:*:*
ip-comm50_firmware15.11.0.33cpe:2.3:o:ip-com:m50_firmware:15.11.0.33:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ip-com	m50	-	cpe:2.3:h:ip-com:m50:-:::::::*
ip-com	m50_firmware	15.11.0.33	cpe:2.3:o:ip-com:m50_firmware:15.11.0.33:::::::*

References

hackmd.io/dLM8vDnwQOup8mmDbHJRHQ?both

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.8%

JSON

Related for CVE-2022-45711