CVE-2022-33312criticalCWE-78

CVE-2022-33312: critical vulnerability in Robustel R1510

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 4.3%
Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_cert_file/` API is affected by command injection vulnerability.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
Robustel · R1510
Related CVEs — Robustel R1510

In the same product, most dangerous first.

CVE-2022-28127HIGHCVE-2022-28127EPSS 37.9%CVE-2022-33329CRITICALCVE-2022-33329EPSS 4.3%CVE-2022-33328CRITICALCVE-2022-33328EPSS 4.3%CVE-2022-33327CRITICALCVE-2022-33327EPSS 4.3%CVE-2022-33326CRITICALCVE-2022-33326EPSS 4.3%CVE-2022-33325CRITICALCVE-2022-33325EPSS 4.3%