medium6.9
CVE-2022-46361
An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands.
Impact
An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execution of unwanted commands. This issue affects OneWireless all versions up to 322.1 and fixed in version 322.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Honeywell | Onewireless Network Wireless Device Manager Firmware | before r322.2 |