Proscend Communications M330-W and M330-W5 vulnerable to OS command injection

🗓️ 16 Apr 2024 05:30:59Reported by Japan Vulnerability NotesType

jvn

jvn🔗 jvndb.jvn.jp👁 6 Views

Proscend M330-W and M330-W5 are vulnerable to OS command injection; update firmware to fix.

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for OS Command Injection in Proscend M330-W_Firmware	24 Dec 202310:46	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Proscend M330-W_Firmware	3 Jun 202422:25	–	githubexploit
ATTACKERKB	CVE-2022-36779	21 Aug 202211:14	–	attackerkb
BDU FSTEC	The vulnerability of Proscend M330-w, M330-W5, M350-5G, M350-W5G, M350-6, M350-W6, M301-G, M301-GW, and ICR 111WG microprogrammed software in industrial routers stems from the lack of measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.	2 Jan 202400:00	–	bdu_fstec
Circl	CVE-2022-36779	13 Sep 202218:25	–	circl
CNNVD	PROSCEND Industrial Cellular Router 操作系统命令注入漏洞	13 Sep 202200:00	–	cnnvd
CVE	CVE-2022-36779	13 Sep 202214:57	–	cve
Cvelist	CVE-2022-36779 PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection	13 Sep 202214:57	–	cvelist
Japan Vulnerability Notes	JVN#23835228: Proscend Communications M330-W and M330-W5 vulnerable to OS command injection	16 Apr 202400:00	–	jvn
NVD	CVE-2022-36779	13 Sep 202215:15	–	nvd

Source	Link
drive	www.drive.google.com/file/d/1ouGAh6ty7G2VDlA5fc0aC246BsgcAzw6/view
cve	www.cve.org/CVERecord
jvn	www.jvn.jp/en/jp/JVN23835228/index.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-36779
gov	www.gov.il/en/departments/faq/cve_advisories
ipa	www.ipa.go.jp/en/security/vulnerabilities/cwe.html

16 Apr 2024 05:30Current

7.7High risk

Vulners AI Score7.7

CVSS 38.8

CVSS 3.16.5 - 9.8

EPSS0.02311

Proscend M330-W M330-W5 command injection firmware update security vulnerability