CVE-2022-24915

creationtimestamp| type| source ---|---|--- 2022-03-10 20:19:14+00:00| seen| https://t.me/cibsecurity/38684...

CVE-2022-24915

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section where the information is displayed. Injection can be done on specific parameters. Th...

CVE-2022-24915 ICSA-22-062-01 IPCOMM ipDIO

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section where the information is displayed. Injection can be done on specific parameters. Th...

CVE-2022-24915

CVE-2022-24915 in IPCOMM ipDIO: a code-injection vulnerability in the web interface caused by insufficient input filtering when loading sections. It enables injection of malicious code that executes when a legitimate user performs config-related actions (upload/copy/download/delete). The ICS advi...

IPCOMM ipDIO

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: IPCOMM Equipment: ipDIO Vulnerabilities: Cross-site Scripting, Code Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to inject and execute arbitrary...