JVN#23835228: Proscend Communications M330-W and M330-W5 vulnerable to OS command injection

2024-04-1600:00:00

Japan Vulnerability Notes

jvn.jp

proscend communications

m330-w

m330-w5

os command injection

firmware

cwe-78

vulnerability

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

M330-W and M330-W5 provided by Proscend Communications Inc. are LTE Industrial Cellular Routers. M330-W and M330-W5 contain an OS command injection vulnerability (CWE-78).

Impact

An arbitrary OS command may be executed by an attacker who has access to the product.

Solution

Update the firmware
The developer provides firmware which contains a fix for this vulnerability. Download and update the firmware.

Products Affected

M330-W versions prior to V1.11
M330-W5 versions prior to V1.11