Vulnerability · Published Feb 4, 2022 · Assigned by icscert
CVE-2022-0365Ricon Mobile, Inc.
Critical 9.1
In plain English
A critical-severity OS command injection in Industrial Cellular Router from Ricon. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 82% of all known vulnerabilities).
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)2.2%top 17.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary shell commands as the Admin (root) user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ricon | Industrial Cellular Router | S9922XL 16.10.3S9922L 16.10.3 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-032-01 x_refsource_CONFIRM