Code injection

2022-03-3018:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin.

CPENameOperatorVersion
kio-1m_firmwareeq<= 2022330
kio-2m_firmwareeq<= 2022330
kio-2md_firmwareeq<= 2022330
kio-2mrs_firmwareeq<= 2022330
kio-2ms_firmwareeq<= 2022330
kio-8\\(4\\)_firmwareeq<= 2022330
kio-8\\(4\\)l_firmwareeq<= 2022330
kio_firmwareeq<= 2022330

Name	Operator	Version
kio-1m_firmware	eq	<= 2022330
kio-2m_firmware	eq	<= 2022330
kio-2md_firmware	eq	<= 2022330
kio-2mrs_firmware	eq	<= 2022330
kio-2ms_firmware	eq	<= 2022330
kio-8\\(4\\)_firmware	eq	<= 2022330
kio-8\\(4\\)l_firmware	eq	<= 2022330
kio_firmware	eq	<= 2022330