high7.2
CVE-2022-38156
A remote command injection issues exists in the web server of the Kratos SpectralNet device with SpectralNet Narrowband (NB) before 1.7.5.
Impact
A remote command injection issues exists in the web server of the Kratos SpectralNet device with SpectralNet Narrowband (NB) before 1.7.5. As an admin user, an attacker can send a crafted password in order to execute Linux commands as the root user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kratosdefense | Spectralnet Narrowband Firmware | before 1.7.5 |