CVE-2022-36553
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-36553
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Hytec Inter HWL-2511-SS 命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hytec Inter HWL-2511-SS是日本Hytec Inter公司的一种工业 LTE 路由器和 Wi-Fi 接入点。 Hytec Inter HWL-2511-SS v1.05及之前存在安全漏洞，该漏洞源于组件/www/cgi-bin/popen.cgi 包含一个命令注入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2022-36553
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | PoC Script for CVE-2022-36553: Exploits an unauthenticated remote command injection vulnerability in Hytec Inter HWL-2511-SS device. | https://github.com/0xNslabs/CVE-2022-36553-PoC | POC Details |
| 2 | Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36553.yaml | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-36553
请登录查看更多情报信息。
- https://hytec.co.jp/eng/products/our-brand/hwl-2511-ss.htmlx_refsource_MISC
- https://gist.github.com/Nwqda/b27418ab801eb0b9cdbe8d042cb0249bx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-36553
Same Patch Batch · n/a · 2022-08-29 · 74 CVEs total
| CVE-2022-32548 | 10.0 CRITICAL | DrayTek Vigor routers 安全漏洞 |
| CVE-2022-21165 | 9.8 CRITICAL | Arbitrary Command Injection |
| CVE-2022-25644 | 9.8 CRITICAL | Arbitrary Code Execution |
| CVE-2022-25921 | 8.1 HIGH | Arbitrary Code Execution |
| CVE-2022-37680 | 7.5 HIGH | Hitachi Kokusai Electric ISnex HC-IP9100HD 访问控制错误漏洞 |
| CVE-2022-37681 | 7.5 HIGH | Hitachi Kokusai Electric ISnex HC-IP9100HD 路径遍历漏洞 |
| CVE-2022-0718 | Python-Oslo-Utils 日志信息泄露漏洞 | |
| CVE-2022-1115 | ImageMagick 缓冲区错误漏洞 | |
| CVE-2022-0850 | Linux kernel 安全漏洞 | |
| CVE-2022-0367 | libmodbus 缓冲区错误漏洞 | |
| CVE-2022-0812 | Linux kernel 信息泄露漏洞 | |
| CVE-2022-0497 | Openscad 缓冲区错误漏洞 | |
| CVE-2022-0496 | Openscad 缓冲区错误漏洞 | |
| CVE-2022-0485 | libnbd 代码问题漏洞 | |
| CVE-2022-0480 | Linux kernel 安全漏洞 | |
| CVE-2022-0669 | DPDK 资源管理错误漏洞 | |
| CVE-2022-0851 | Convert2RHEL 信息泄露漏洞 | |
| CVE-2022-0852 | Red Hat Convert2RHEL 安全漏洞 | |
| CVE-2022-1016 | Linux kernel 缓冲区错误漏洞 | |
| CVE-2022-1117 | glibc 安全特征问题漏洞 |
Showing top 20 of 74 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2022-36553
No comments yet