1. Home
  2. CVE Database
  3. CVE-2022-36779
MEDIUM · 6.5

CVE-2022-36779

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW...

Vulnerability Description

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
ProscendM330-W Firmware< 1.11
ProscendM330-W-
ProscendM330-W5 Firmware< 1.11
ProscendM330-W5-
ProscendM350-5G Firmware< 1.02
ProscendM350-5G-
ProscendM350-W5G Firmware< 1.02
ProscendM350-W5G-
ProscendM350-6 Firmware< 1.02
ProscendM350-6-
ProscendM350-W6 Firmware< 1.02
ProscendM350-W6-
ProscendM301-G Firmware< 2.20
ProscendM301-G-
ProscendM301-Gw Firmware< 2.20
ProscendM301-Gw-
AdviceIcr 111Wg Firmware< 1.11
AdviceIcr 111Wg-

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2022-36779?

CVE-2022-36779 is a vulnerability with a CVSS score of 6.5 (MEDIUM). PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW...

How severe is CVE-2022-36779?

CVE-2022-36779 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-36779?

Check the references section above for vendor advisories and patch information. Affected products include: Proscend M330-W Firmware, Proscend M330-W, Proscend M330-W5 Firmware, Proscend M330-W5, Proscend M350-5G Firmware.