by Kastro
Paper/Archive/CVE-2022-0365

CVE-2022-0365

Ricon Industrial Cellular Router — Ricon Mobile, Inc.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 82.4.824 × 2016.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary shell commands as the Admin (root) user.

Affected

ProductAffectedFixed inSource
Industrial Cellular RouterS9922XL 16.10.3–CNA
Industrial Cellular RouterS9922L 16.10.3–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refcisa.gov/uscert/ics/advisories/icsa-22-032-01