Vulnerability · Published Sep 13, 2022 · Assigned by INCD
CVE-2022-36779PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection
Medium 6.5
In plain English
A medium-severity security flaw in ADVICE ICR 111WG from PROSCEND. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PROSCEND | PROSCEND M330-w / M330-W5 | V1.11 – before V1.11* |
| PROSCEND | PROSCEND M350-5G / M350-W5G / M350-6 / M350-W6 | V1.02 – before V1.02* |
| PROSCEND | PROSCEND M301-G / M301-GW | V2.20 – before V2.20* |
| PROSCEND | ADVICE ICR 111WG | V1.11 – before V1.11* |
References
- https://www.gov.il/en/departments/faq/cve_advisories x_refsource_MISC