H3C GR-1200W Router Command Injection (CVE-2022-37070)

A command injection vulnerability exists in H3C GR-1200W Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-37070

CVE-2022-37070 affects H3C GR-1200W MiniGRW1A0V100R006. A command-injection vulnerability exists via the endpoint parameter param , enabling arbitrary commands to be executed on the device. CVSSv3.1 metrics indicate: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8, CRITICAL). Connected advis...