CVE-2022-35266mediumCWE-125

CVE-2022-35266: medium-severity vulnerability in Robustel R1510

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.9epss 1.2%
A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_firmware/` API.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected products
Robustel · R1510
Related CVEs — Robustel R1510

In the same product, most dangerous first.

CVE-2022-28127HIGHCVE-2022-28127EPSS 37.9%CVE-2022-33329CRITICALCVE-2022-33329EPSS 4.3%CVE-2022-33328CRITICALCVE-2022-33328EPSS 4.3%CVE-2022-33327CRITICALCVE-2022-33327EPSS 4.3%CVE-2022-33326CRITICALCVE-2022-33326EPSS 4.3%CVE-2022-33325CRITICALCVE-2022-33325EPSS 4.3%