NetSight
high8.8

CVE-2022-23332

Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd.

Impact

Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field.

Affected products

VendorProductAffected versions
EjointechAcom508 Firmware
through 508-609-900-241-100-020
EjointechAcom532 Firmware
through 532-609-915-041-100-020
EjointechAcom516 Firmware
All versions

Weakness classification

References