CVE-2022-45005

IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-12-13

Last modified

2025-04-22

Weaknesses

CWE-78

Affected products

• Ew9 Firmware (Ip-com)

References

• https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/6_ping_cmdi.md