CVE-2022-33128

RG-EG series gateway EG350 EGRGOS 11.16 was discovered to contain a SQL injection vulnerability via the function getalarmAction at /alarmpi/alarmService.php...

CVE-2022-33128

The CVE-2022-33128 entry describes a SQL injection in the RG-EG Series gateway RG350 (EG350/EG_RGOS 11.1(6)). The vulnerability resides in the alarmService.php function get_alarmAction, enabling attackers to submit crafted SQL via a request to /alarm_pi/alarmService.php. Reported impact across so...