CVE-2022-31208

Infiray IRAY-A8Z3 1.0.957 webserver is affected by CVE-2022-31208: an endpoint can execute arbitrary commands via the cmd_string URL parameter. Root cause described as improper handling of cmd_string leading to command execution. The vulnerability supports network access with low privileges and n...