Lucene search
HistoryOct 25, 2022 - 5:15 p.m.
CVE-2022-33150
command injection
robustel r1510
network request
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
65.8%
An OS command injection vulnerability exists in the js_package install functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
Affected configurations
Node
robustelr1510Match-
robustelr1510_firmwareMatch3.1.16
ORrobustelr1510_firmwareMatch3.3.0
Related
talos
talos
Robustel R1510 js_package install OS command injection vulnerability
2022-10-14 00:00:00
prion
prion
Command injection
2022-10-25 17:15:00
cve
cve
CVE-2022-33150
2022-10-25 17:15:52
cvelist
cvelist
CVE-2022-33150
2022-10-14 00:00:00
talosblog
talosblog
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
65.8%
Related for NVD:CVE-2022-33150