Skip to content
OpenAdvisories
High · 8.8 CVE-2022-23770 EUVD-2022-28706GHSA-r38c-29h3-jjgv

WISA Smart Wing CMS Remote Command Execution Vulnerability

Published Oct 17, 2022 · Updated May 13, 2025 · Assigned by krcert

Description

This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of certain API constructors. Remote attackers could use this vulnerability to execute malicious commands such as directory traversal.

Affected products

VendorProductAffectedFixed
WISA Smart Wing CMS unspecified – < ver.19051 ver.19051

References