CVE-2022-40022

Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-02-13

Last modified

2025-03-21

Weaknesses

CWE-77

Affected products

• Syncserver S650 Firmware (Microchip)

References

• http://packetstormsecurity.com/files/172907/Symmetricom-SyncServer-Unauthenticated-Remote-Command-Execution.html
• https://www.microsemi.com/campaigns/network-time-servers/S650p/%3Fgd%3D1&id=5&gclid=Cj0KCQjwjbyYBhCdARIsAArC6LL-202ej5Y…
• https://www.microsemi.com/campaigns/network-time-servers/syncserver-s600/?url=
• https://www.microsemi.com/document-portal/doc_download/135737-datasheet-syncserver-s650
• https://www.securifera.com/advisories/CVE-2022-40022/