CVE-2022-36779

MEDIUM

Proscend M330-w Firmware < 1.11 - OS Command Injection

Title source: rule
STIX 2.1

Description

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301

Exploits (3)

nomisec WORKING POC 3 stars
by rootDR · poc
https://github.com/rootDR/CVE-2022-36779
nomisec WORKING POC
by rootdr-backup · poc
https://github.com/rootdr-backup/exploit-CVE-2022-36779
nomisec WORKING POC
by EmadYaY · poc
https://github.com/EmadYaY/CVE-2022-36779

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.gov.il/en/departments/faq/cve_advisories

Scores

CVSS v3 6.5
EPSS 0.2320
EPSS Percentile 96.0%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Details

CWE
CWE-78
Status published
Products (9)
advice/icr_111wg_firmware < 1.11
proscend/m301-g_firmware < 2.20
proscend/m301-gw_firmware < 2.20
proscend/m330-w5_firmware < 1.11
proscend/m330-w_firmware < 1.11
proscend/m350-5g_firmware < 1.02
proscend/m350-6_firmware < 1.02
proscend/m350-w5g_firmware < 1.02
proscend/m350-w6_firmware < 1.02
Published Sep 13, 2022
Tracked Since Feb 18, 2026