CVE-2022-31208

HIGH

Infiray cmd_string URL Parameter Arbitraty Command Execution

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2022-31208 has a selected CVSS score of 8.8 (high).

Description

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmd_string URL parameter.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 22, 2026 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

1
ProductSourceVersion range

iray-a8z3_firmware

Browse infiray / iray-a8z3_firmware
VulnCheckVersion data not supplied

References

3