CVE-2022-34850criticalCWE-78

CVE-2022-34850: critical vulnerability in Robustel R1510

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 3.6%
An OS command injection vulnerability exists in the web_server /action/import_authorized_keys/ functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
Robustel · R1510
Related CVEs — Robustel R1510

In the same product, most dangerous first.

CVE-2022-28127HIGHCVE-2022-28127EPSS 37.9%CVE-2022-33329CRITICALCVE-2022-33329EPSS 4.3%CVE-2022-33328CRITICALCVE-2022-33328EPSS 4.3%CVE-2022-33327CRITICALCVE-2022-33327EPSS 4.3%CVE-2022-33326CRITICALCVE-2022-33326EPSS 4.3%CVE-2022-33325CRITICALCVE-2022-33325EPSS 4.3%