Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-45717 EUVD-2022-48576GHSA-5rm5-cw6f-p927

IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSet…

Published Dec 23, 2022 · Updated Apr 15, 2025 · Assigned by mitre

Description

IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request.

References