CVE-2022-33313

Multiple command injection vulnerabilities exist in the webserver action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...

CVE-2022-33313

CVE-2022-33313 affects Robustel R1510 (3.3.0) web_server endpoints. Multiple OS command injection flaws arise from unsafe handling of user-controlled input in several /action/ endpoints (notably /action/import_https_cert_file/, /action/import_cert_file/, and /action/import_sdk_file/). The root ca...

Robustel R1510 web_server action endpoints OS command injection vulnerabilities

Summary Multiple command injection vulnerabilities exist in the webserver action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities. Tested...