Paper/Archive/CVE-2022-25017

CVE-2022-25017

mitre — Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field.

EPSS 29%CVSS 9.1

critical.is priorityof 100

47

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 98.2.982 × 2019.6 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

mitre (CNA)9.1CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N

References

refgist.github.com/zaee-k/390b2f8e50407e4b199df806baa7e4ef