Lucene search

PRIOn knowledge basePRION:CVE-2022-36779

HistorySep 13, 2022 - 3:15 p.m.

Command injection

2022-09-1315:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

50.5%

JSON

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301

CPENameOperatorVersion
icr_111wg_firmwarelt1.11
m301-g_firmwarelt2.20
m301-gw_firmwarelt2.20
m330-w5_firmwarelt1.11
m330-w_firmwarelt1.11
m350-5g_firmwarelt1.02
m350-6_firmwarelt1.02
m350-w5g_firmwarelt1.02
m350-w6_firmwarelt1.02

Name	Operator	Version
icr_111wg_firmware	lt	1.11
m301-g_firmware	lt	2.20
m301-gw_firmware	lt	2.20
m330-w5_firmware	lt	1.11
m330-w_firmware	lt	1.11
m350-5g_firmware	lt	1.02
m350-6_firmware	lt	1.02
m350-w5g_firmware	lt	1.02
m350-w6_firmware	lt	1.02

References

www.gov.il/en/departments/faq/cve_advisories

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

50.5%

JSON

Related for PRION:CVE-2022-36779