CVE-2022-41870

Опубликовано: 30 сент. 2022

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload.

Конфигурация 1

Одно из

cpe:2.3:o:innovaphone:innovaphone_firmware:*:*:*:*:*:*:*:*

Версия до 13r2 (исключая)

cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:-:*:*:*:*:*:*

cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_12:*:*:*:*:*:*

cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_13:*:*:*:*:*:*

cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_14:*:*:*:*:*:*

cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_15:*:*:*:*:*:*

cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_16:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01569

Низкий

7.2 High

CVSS3

CWE-77

GHSA-fm63-pfg2-7jrw

CVSS3: 9.8

github

больше 3 лет назад