CVE-2022-36779

Published: Sep 13, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301

Affected (9)

Products: Proscend: M330 W Firmware, M330 W5 Firmware, M350 5g Firmware, M350 W5g Firmware, M350 6 Firmware, M350 W6 Firmware, M301 G Firmware, M301 Gw Firmware · Advice: Icr 111wg Firmware

8 products

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Proscend M330 W Firmware	Before 1.11

Running on/with	Platform Versions
Proscend M330 W	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Proscend M330 W5 Firmware	Before 1.11

Running on/with	Platform Versions
Proscend M330 W5	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Proscend M350 5g Firmware	Before 1.02

Running on/with	Platform Versions
Proscend M350 5g	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Proscend M350 W5g Firmware	Before 1.02

Running on/with	Platform Versions
Proscend M350 W5g	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Proscend M350 6 Firmware	Before 1.02

Running on/with	Platform Versions
Proscend M350 6	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Proscend M350 W6 Firmware	Before 1.02

Running on/with	Platform Versions
Proscend M350 W6	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Proscend M301 G Firmware	Before 2.20

Running on/with	Platform Versions
Proscend M301 G	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Proscend M301 Gw Firmware	Before 2.20

Running on/with	Platform Versions
Proscend M301 Gw	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Advice Icr 111wg Firmware	Before 1.11

Running on/with	Platform Versions
Advice Icr 111wg	All versions

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

https://www.gov.il/en/departments/faq/cve_advisories

Source: cna@cyber.gov.il

Third Party Advisory

https://www.gov.il/en/departments/faq/cve_advisories

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.