PT-2022-7224 · Proscend · Proscend M350-5G+7

Metadata

·

Published

2022-08-21

·

Updated

2023-12-26

·

CVE-2022-36779

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Proscend M330-w versions Proscend M330-W5 versions Proscend M350-5G versions Proscend M350-W5G versions Proscend M350-6 versions Proscend M350-W6 versions Proscend M301-G versions Proscend M301-GW versions Proscend ICR 111WG versions
Description The issue is related to the lack of measures to neutralize special elements used in the operating system command, which can allow a remote attacker to execute arbitrary commands.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-00002
CVE-2022-36779

Affected Products

Proscend Icr 111Wg
Proscend M301-G
Proscend M330-W5
Proscend M330-W
Proscend M350-5G
Proscend M350-6
Proscend M350-W5G
Proscend M350-W6