Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2022-44089 | ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE. | Critical (9.8) | 2022-11-10 | Environment Specific |
| CVE-2022-44088 | ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCR… | Critical (9.8) | 2022-11-10 | Environment Specific |
| CVE-2022-44087 | ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component UPFILE_PIC_ZO… | Critical (9.8) | 2022-11-10 | Environment Specific |
| CVE-2022-39037 | Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit… | High (7.5) | 2022-11-10 | Environment Specific |
| CVE-2022-38121 | UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with gen… | Medium (6.5) | 2022-11-10 | Environment Specific |