CVE-2022-45709 - IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function

Back Back to CVE browser

CRITICAL

IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function

Published Dec 23, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 4.30%

Description

IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48568		Advisory
https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BkFpXcsSs
https://hackmd.io/@chaosisaladdar/BkFpXcsSs		exploit