PT-2022-24406 · Unknown · Smacam Cs-Qr10+1

Samy Younsi + 1 · Published 2022-09-08 · Updated 2024-01-08 · CVE-2022-38399

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SmaCam CS-QR10 all versions SmaCam Night Vision CS-QR20 all versions

Description A missing protection mechanism for an alternate hardware interface in the affected products allows an attacker to execute an arbitrary OS command by connecting to the product's specific serial connection.

Recommendations For SmaCam CS-QR10 all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For SmaCam Night Vision CS-QR20 all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2022-38399

Affected Products

Smacam Cs-Qr10

Smacam Night Vision Cs-Qr20

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2022-38399 · Security Note
• https://t.me/cibsecurity/49443 · Telegram Post
• https://t.me/cvenotify/36277 · Telegram Post
• https://jvn.jp/en/vu/JVNVU90766406/index.html · Note
• https://planex.co.jp/products/cs-qr20/index.shtml · Note
• https://t.me/cvenotify/35846 · Telegram Post
• https://planex.co.jp/products/cs-qr10/index.shtml · Note
• https://twitter.com/Dinosn/status/1744290323616936446 · Twitter Post