critical9.8
CVE-2022-31210
An issue was discovered in Infiray IRAY-A8Z3 1.0.957.
Impact
An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are considered to be backdoor accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infiray | Iray-A8z3 Firmware | Version 1.0.957 |