« Volver al listado

CVE-2022-41870

Estado: ModificadaAlta (7.2)—

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Innovaphone — Innovaphone Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-41870",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-41870",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-20T18:28:54.809231Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-09-30T18:15:11.973",
  "references": [
    {
      "url": "http://wiki.innovaphone.com/index.php?title=Reference13r2:Release_Notes_Security",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://wiki.innovaphone.com/index.php?title=Reference13r2:Release_Notes_Security",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload."
    },
    {
      "lang": "es",
      "value": "AP Manager en Innovaphone versiones anteriores a 13r2 Service Release 17 permite una inyección de comandos por medio de un ID de servicio modificado durante la descarga de la aplicación"
    }
  ],
  "lastModified": "2026-06-17T05:03:57.060",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:innovaphone:innovaphone_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C6108D6-B398-4C69-925A-E4ACF07104C5",
              "versionEndExcluding": "13r2"
            },
            {
              "criteria": "cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC90D79E-B7B3-4496-AC5A-94E790595F86"
            },
            {
              "criteria": "cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_12:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CE14696-6DC8-41D3-BF26-E39A6AC10833"
            },
            {
              "criteria": "cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_13:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "979F415A-9B69-4F03-945E-D9594C1A0D0D"
            },
            {
              "criteria": "cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_14:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FF2226D-87B7-440C-AE16-BF7449B55B6C"
            },
            {
              "criteria": "cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_15:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB59B0C3-28AB-4ECF-A6EB-F21EDE506FA3"
            },
            {
              "criteria": "cpe:2.3:o:innovaphone:innovaphone_firmware:13r2:service_release_16:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4F172EC-60AD-4E9B-AAFF-18C4851AB88D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}