critical9.8
CVE-2022-29337
C-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability via the va_cmd parameter in formlanipv6.
Impact
C-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability via the va_cmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cdatatec | Fd702xw-X-R430 Firmware | Version 2.1.13_x001 |