by Kastro
Paper/Archive/CVE-2022-36779

CVE-2022-36779

PROSCEND PROSCEND M330-w / M330-W5 — PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 87.0.870 × 2017.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301

Affected

ProductAffectedFixed inSource
PROSCEND M330-w / M330-W5V1.11 – < V1.11*V1.11*CNA
PROSCEND M350-5G / M350-W5G / M350-6 / M350-W6V1.02 – < V1.02*V1.02*CNA
PROSCEND M301-G / M301-GWV2.20 – < V2.20*V2.20*CNA
ADVICE ICR 111WGV1.11 – < V1.11*V1.11*CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
INCD (CNA)6.5CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

References

refgov.il/en/departments/faq/cve_advisories