CVE-2022-36779

MEDIUM

Proscend M330-W/M330-W5/M350-5G/M350-W5G/M350-6/M350-W6/M301-G/M301-GW & ADVICE ICR-111WG - OS Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2022-36779. PoCs published by rootDR, rootdr-backup, EmadYaY.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2022-36779, an authenticated command injection vulnerability. The Python script authenticates with default credentials and allows arbitrary command execution via a vulnerable CGI endpoint.

Description

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301

Exploits (3)

nomisec WORKING POC 3 stars
by rootDR · poc
https://github.com/rootDR/CVE-2022-36779

This repository contains a functional exploit for CVE-2022-36779, an authenticated command injection vulnerability. The Python script authenticates with default credentials and allows arbitrary command execution via a vulnerable CGI endpoint.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Unknown (likely a network device or embedded system with a web interface)
Auth required
Prerequisites: Network access to the target · Default or known credentials
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC
by rootdr-backup · poc
https://github.com/rootdr-backup/exploit-CVE-2022-36779

This repository contains a functional exploit for CVE-2022-36779, an authenticated command injection vulnerability. The script authenticates with default credentials and allows arbitrary command execution via a vulnerable CGI endpoint.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Unknown (likely a network device or appliance with a web interface)
Auth required
Prerequisites: Network access to the target · Default or known credentials
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC
by EmadYaY · poc
https://github.com/EmadYaY/CVE-2022-36779

This repository contains a functional exploit for CVE-2022-36779, an unauthenticated OS command injection vulnerability in Proscend Industrial Cellular Router. The exploit authenticates with default credentials and allows arbitrary command execution via a crafted request to `/cgi-bin/popen.cgi`.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Proscend Industrial Cellular Router (ICR111WG)
Auth required
Prerequisites: Network access to the target device · Default credentials (root:2wsx#EDC) or valid credentials
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.gov.il/en/departments/faq/cve_advisories

Scores

CVSS v3 6.5
EPSS 0.0229
EPSS Percentile 80.9%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Details

CWE
CWE-78
Status published
Products (9)
advice/icr_111wg_firmware < 1.11
proscend/m301-g_firmware < 2.20
proscend/m301-gw_firmware < 2.20
proscend/m330-w5_firmware < 1.11
proscend/m330-w_firmware < 1.11
proscend/m350-5g_firmware < 1.02
proscend/m350-6_firmware < 1.02
proscend/m350-w5g_firmware < 1.02
proscend/m350-w6_firmware < 1.02
Published Sep 13, 2022
Tracked Since Feb 18, 2026