CVE-2022-32429

Critical

An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch…

mitre·CWE-287·Published 2022-08-09

CVSS

9.8

EPSS

0.76

KEV

Exploits

cve.orgen

271 chars

An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MNT.2408 allows unauthenticated attackers to arbitrarily configure settings within the application, leading to remote code execution.

NVDen

271 chars

NVDes

317 chars

Un problema de omisión evasión de autenticación en el componente http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh de Mega System Technologies Inc MSNSwitch versión MNT.2408, permite a atacantes no autenticados configurar arbitrariamente los ajustes dentro de la aplicación, conllevando a una ejecución de código remota

CVE-2022-32429

CVSS metrics across sources