CVE-2022-43366

2022-10-2700:00:00

mitre

www.cve.org

ip-com

ew9

unauthenticated access

sensitive information

interfaces

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

62.0%

JSON

IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via the checkLoginUser, ate, telnet, version, setDebugCfg, and boot interfaces.

References

github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/4_information_disclosure.md