CVE Vulnerability

CVE-2022-41870

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload.

7.2 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://wiki.innovaphone.com/index.php?title=Reference13r2:Release_Notes_Security Release Notes Vendor Advisory
Configurations

Configuration 1

cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:-:*:*:*:*:*:*
cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_12:*:*:*:*:*:*
cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_13:*:*:*:*:*:*
cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_14:*:*:*:*:*:*
cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_15:*:*:*:*:*:*
cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_16:*:*:*:*:*:*
cpe:2.3:o:innovaphone:innovaphone_firmware:*:*:*:*:*:*:*:*
Information

Published : 2022-09-30 06:15

Updated : 2022-10-11 06:40

NVD link : CVE-2022-41870

Mitre link : CVE-2022-41870

Products Affected
No products.
CWE
CWE-77