← Back to browse · API

CVE-2022-45717

Severity
CRITICAL
CVSS
9.8
EPSS
0.04253
Risk score
40.69
CISA KEV
No
PoC
No
Published
2022-12-23
Modified
2025-04-15
First seen
2026-08-07
Aliases
EUVD-2022-48576, GHSA-5RM5-CW6F-P927
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-48576

Description

IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request.

References