VULNERABILITY INTELLIGENCE
CVE-2022-0365
CVSS score9.1 CRITICAL
EPSS probability2.18%
CISA KEVNot currently listed
Published2022-02-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Description
The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary shell commands as the Admin (root) user.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-78
- nvd@nist.gov: CWE-78
Primary references
- ics-cert@hq.dhs.gov — Mitigation, Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory, US Government Resource