critical9.8
CVE-2022-32765
An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0.
Impact
An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Robustel | R1510 Firmware | Versions 3.1.16, 3.3.0 |