Code injection

2021-10-2214:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

JSON

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality.

CPENameOperatorVersion
wireless_1410_gateway_firmwarelt4.7.94
wireless_1410d_gateway_firmwarelt4.7.94
wireless_1420_gateway_firmwarelt4.7.94

Name	Operator	Version
wireless_1410_gateway_firmware	lt	4.7.94
wireless_1410d_gateway_firmware	lt	4.7.94
wireless_1420_gateway_firmware	lt	4.7.94

References

us-cert.cisa.gov/ics/advisories/icsa-21-278-02