Lucene search

[email protected]CVE-2022-36779

HistorySep 13, 2022 - 3:15 p.m.

CVE-2022-36779

2022-09-1315:15:08

CWE-78

[email protected]

web.nvd.nist.gov

cve-2022-36779

unauthenticated os command injection

industrial cellular router

gps

proscend

advice icr 111wg

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%

JSON

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301

Affected configurations

NVD

Node

proscendm330-w_firmwareRange<1.11

AND

proscendm330-wMatch-

Node

proscendm330-w5_firmwareRange<1.11

AND

proscendm330-w5Match-

Node

proscendm350-5g_firmwareRange<1.02

AND

proscendm350-5gMatch-

Node

proscendm350-w5g_firmwareRange<1.02

AND

proscendm350-w5gMatch-

Node

proscendm350-6_firmwareRange<1.02

AND

proscendm350-6Match-

Node

proscendm350-w6_firmwareRange<1.02

AND

proscendm350-w6Match-

Node

proscendm301-g_firmwareRange<2.20

AND

proscendm301-gMatch-

Node

proscendm301-gw_firmwareRange<2.20

AND

proscendm301-gwMatch-

Node

adviceicr_111wg_firmwareRange<1.11

AND

adviceicr_111wgMatch-

CPENameOperatorVersion
proscend:m330-w_firmwareproscend m330-w firmwarelt1.11

CPE	Name	Operator	Version
proscend:m330-w_firmware	proscend m330-w firmware	lt	1.11

CNA Affected

[
  {
    "product": "PROSCEND M330-w / M330-W5",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V1.11*",
        "status": "affected",
        "version": "V1.11",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PROSCEND M350-5G / M350-W5G / M350-6 / M350-W6",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V1.02*",
        "status": "affected",
        "version": "V1.02",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PROSCEND M301-G / M301-GW",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V2.20*",
        "status": "affected",
        "version": "V2.20",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ADVICE ICR 111WG ",
    "vendor": "PROSCEND",
    "versions": [
      {
        "lessThan": "V1.11*",
        "status": "affected",
        "version": "V1.11",
        "versionType": "custom"
      }
    ]
  }
]