PT-2022-7228 · Hytec Inter · Hytec Inter Hwl-2511-Ss

Published 2022-07-25 · Updated 2025-10-14 · CVE-2022-36553

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hytec Inter HWL-2511-SS version 1.05 and below

Description The issue is related to a command injection vulnerability via the component /www/cgi-bin/popen.cgi. This vulnerability is associated with the lack of data sanitization at the management level, which can allow a remote attacker to execute arbitrary commands.

Recommendations For Hytec Inter HWL-2511-SS version 1.05 and below, consider disabling access to the /www/cgi-bin/popen.cgi component until a patch is available. Restricting access to this component can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-00309

CVE-2022-36553

Affected Products

Hytec Inter Hwl-2511-Ss

References · 18

• 🔥 https://github.com/0xNslabs/CVE-2022-36553-PoC · Exploit
• https://bdu.fstec.ru/vul/2024-00309 · Security Note
• https://hytec.co.jp/eng/wordpress/wp-content/uploads/2019/09/hwl-2511-ss-ds.3.0.pdf · Vendor Advisory
• https://hytec.co.jp/eng/products/our-brand/hwl-2511-ss.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-36553 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36553 · Security Note
• https://t.me/ckure/13412 · Telegram Post
• https://gist.github.com/Nwqda/b27418ab801eb0b9cdbe8d042cb0249b · Note
• https://t.me/cybersecuritytechnologies/9771 · Telegram Post
• https://t.me/aptreports/22814 · Telegram Post
• https://neroteam.com/blog/hytec-inter-hwl-2511-ss-vulnerability-report · Note
• https://jvndb.jvn.jp/ja/contents/2022/JVNDB-2022-015964.html · Note
• https://t.me/cibsecurity/49016 · Telegram Post
• https://twitter.com/ksg93rd/status/1745890144941400296 · Twitter Post
• https://youtube.com/watch?v=ILBJglgD-9U · Note