Lucene search

K
nvd[email protected]NVD:CVE-2022-36779
HistorySep 13, 2022 - 3:15 p.m.

CVE-2022-36779

2022-09-1315:15:08
CWE-78
web.nvd.nist.gov
5
unauthenticated
command injection
proscend
industrial cellular router

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

51.6%

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301

Affected configurations

Nvd
Node
proscendm330-w_firmwareRange<1.11
AND
proscendm330-wMatch-
Node
proscendm330-w5_firmwareRange<1.11
AND
proscendm330-w5Match-
Node
proscendm350-5g_firmwareRange<1.02
AND
proscendm350-5gMatch-
Node
proscendm350-w5g_firmwareRange<1.02
AND
proscendm350-w5gMatch-
Node
proscendm350-6_firmwareRange<1.02
AND
proscendm350-6Match-
Node
proscendm350-w6_firmwareRange<1.02
AND
proscendm350-w6Match-
Node
proscendm301-g_firmwareRange<2.20
AND
proscendm301-gMatch-
Node
proscendm301-gw_firmwareRange<2.20
AND
proscendm301-gwMatch-
Node
adviceicr_111wg_firmwareRange<1.11
AND
adviceicr_111wgMatch-
VendorProductVersionCPE
proscendm330-w_firmware*cpe:2.3:o:proscend:m330-w_firmware:*:*:*:*:*:*:*:*
proscendm330-w-cpe:2.3:h:proscend:m330-w:-:*:*:*:*:*:*:*
proscendm330-w5_firmware*cpe:2.3:o:proscend:m330-w5_firmware:*:*:*:*:*:*:*:*
proscendm330-w5-cpe:2.3:h:proscend:m330-w5:-:*:*:*:*:*:*:*
proscendm350-5g_firmware*cpe:2.3:o:proscend:m350-5g_firmware:*:*:*:*:*:*:*:*
proscendm350-5g-cpe:2.3:h:proscend:m350-5g:-:*:*:*:*:*:*:*
proscendm350-w5g_firmware*cpe:2.3:o:proscend:m350-w5g_firmware:*:*:*:*:*:*:*:*
proscendm350-w5g-cpe:2.3:h:proscend:m350-w5g:-:*:*:*:*:*:*:*
proscendm350-6_firmware*cpe:2.3:o:proscend:m350-6_firmware:*:*:*:*:*:*:*:*
proscendm350-6-cpe:2.3:h:proscend:m350-6:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 181

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

51.6%

Related for NVD:CVE-2022-36779