CVE-2024-22182 HIGH

CVE-2024-22182: Commend WS203VICM Argument Injection

Vendor Commend
Product WS203VICM
Weakness CWE-88
Published March 1, 2024
Last update August 12, 2024

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

What the vulnerability does

01Description

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service.

Key dates

02Disclosure timeline

March 1, 2024 CVE published
August 12, 2024 Record updated