← back
CVE-2022-38399

CVE-2022-38399

EPSS 0.3%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
08 Sep 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product's specific serial connection
Affected products
PLANEX COMMUNICATIONS INC. · SmaCam CS-QR10 and SmaCam Night Vision CS-QR20

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://jvn.jp/en/vu/JVNVU90766406/index.htmlhttps://www.planex.co.jp/products/cs-qr10/index.shtmlhttps://www.planex.co.jp/products/cs-qr20/index.shtml