CVE-2022-22985

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the specific web section where the information is displayed. Injection can be done on specific parameters. The injected code is executed when a legitimate user attempts to review history.

Score

CVSS 3.1 8.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-03-10

Last modified

2025-04-16

Weaknesses

CWE-94

Affected products

• Ipcomm Ipdio (Ipcomm)
• Ipdio Firmware (Ipcomm)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-062-01