CVE-2022-43367 - IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function

CRITICAL

IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function

Published Oct 27, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 5.30%

IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function.

No remediation recorded yet.

Weaknesses (1)

CWE-77

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46406		Advisory
https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/2_cmdi.md		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 27, 2022

Updated May 12, 2025

Reserved Oct 17, 2022

Updated May 12, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Oct 27, 2022

Updated May 12, 2025

Exploited since n/a