CVE-2022-36779 PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection

🗓️ 13 Sep 2022 14:57:52Reported by INCDType

Unauthenticated OS Command Injection in PROSCEND / ADVICE G/5G Industrial Cellular Router

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for OS Command Injection in Proscend M330-W_Firmware	24 Dec 202310:46	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Proscend M330-W_Firmware	3 Jun 202422:25	–	githubexploit
ATTACKERKB	CVE-2022-36779	21 Aug 202211:14	–	attackerkb
BDU FSTEC	The vulnerability of Proscend M330-w, M330-W5, M350-5G, M350-W5G, M350-6, M350-W6, M301-G, M301-GW, and ICR 111WG microprogrammed software in industrial routers stems from the lack of measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.	2 Jan 202400:00	–	bdu_fstec
Circl	CVE-2022-36779	13 Sep 202218:25	–	circl
CNNVD	PROSCEND Industrial Cellular Router 操作系统命令注入漏洞	13 Sep 202200:00	–	cnnvd
CVE	CVE-2022-36779	13 Sep 202214:57	–	cve
Japan Vulnerability Notes	JVN#23835228: Proscend Communications M330-W and M330-W5 vulnerable to OS command injection	16 Apr 202400:00	–	jvn
Japan Vulnerability Notes	Proscend Communications M330-W and M330-W5 vulnerable to OS command injection	16 Apr 202405:30	–	jvn
NVD	CVE-2022-36779	13 Sep 202215:15	–	nvd

[
  {
    "product": "PROSCEND M330-w / M330-W5",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V1.11*",
        "status": "affected",
        "version": "V1.11",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PROSCEND M350-5G / M350-W5G / M350-6 / M350-W6",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V1.02*",
        "status": "affected",
        "version": "V1.02",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PROSCEND M301-G / M301-GW",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V2.20*",
        "status": "affected",
        "version": "V2.20",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ADVICE ICR 111WG",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V1.11*",
        "status": "affected",
        "version": "V1.11",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
gov	www.gov.il/en/departments/faq/cve_advisories

13 Sep 2022 14:57Current

10High risk

Vulners AI Score10

CVSS 3.16.5

EPSS0.02346