Vulnerability-Lookup

CNVD-2022-20533

Vulnerability from cnvd - Published: 2022-03-17

Title

IPCOMM ipDIO代码注入漏洞（CNVD-2022-20533）

Description

IPCOMM ipDIO是德国IPCOMM公司的一种遥控通信设备。用于记录数字和模拟输入并控制数字输出。 IPCOMM ipDIO存在代码注入漏洞，该漏洞源于在易受攻击设备的Web应用程序中加载某些部分时没有过滤器，攻击者可利用漏洞注入恶意代码，当合法用户访问显示信息的特定Web部分时，这些代码将被解释。

Severity

中

Patch Name

IPCOMM ipDIO代码注入漏洞（CNVD-2022-20533）的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页： https://www.ipcomm.de/product/ip4CloudSEC3IO/en/sheet.html

Reference

https://nvd.nist.gov/vuln/detail/CVE-2022-22985

Impacted products

Name
IPCOMM ipDIO 3.9

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-22985"
    }
  },
  "description": "IPCOMM ipDIO\u662f\u5fb7\u56fdIPCOMM\u516c\u53f8\u7684\u4e00\u79cd\u9065\u63a7\u901a\u4fe1\u8bbe\u5907\u3002\u7528\u4e8e\u8bb0\u5f55\u6570\u5b57\u548c\u6a21\u62df\u8f93\u5165\u5e76\u63a7\u5236\u6570\u5b57\u8f93\u51fa\u3002\n\nIPCOMM ipDIO\u5b58\u5728\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5728\u6613\u53d7\u653b\u51fb\u8bbe\u5907\u7684Web\u5e94\u7528\u7a0b\u5e8f\u4e2d\u52a0\u8f7d\u67d0\u4e9b\u90e8\u5206\u65f6\u6ca1\u6709\u8fc7\u6ee4\u5668\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u6ce8\u5165\u6076\u610f\u4ee3\u7801\uff0c\u5f53\u5408\u6cd5\u7528\u6237\u8bbf\u95ee\u663e\u793a\u4fe1\u606f\u7684\u7279\u5b9aWeb\u90e8\u5206\u65f6\uff0c\u8fd9\u4e9b\u4ee3\u7801\u5c06\u88ab\u89e3\u91ca\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttps://www.ipcomm.de/product/ip4CloudSEC3IO/en/sheet.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-20533",
  "openTime": "2022-03-17",
  "patchDescription": "IPCOMM ipDIO\u662f\u5fb7\u56fdIPCOMM\u516c\u53f8\u7684\u4e00\u79cd\u9065\u63a7\u901a\u4fe1\u8bbe\u5907\u3002\u7528\u4e8e\u8bb0\u5f55\u6570\u5b57\u548c\u6a21\u62df\u8f93\u5165\u5e76\u63a7\u5236\u6570\u5b57\u8f93\u51fa\u3002\r\n\r\nIPCOMM ipDIO\u5b58\u5728\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5728\u6613\u53d7\u653b\u51fb\u8bbe\u5907\u7684Web\u5e94\u7528\u7a0b\u5e8f\u4e2d\u52a0\u8f7d\u67d0\u4e9b\u90e8\u5206\u65f6\u6ca1\u6709\u8fc7\u6ee4\u5668\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u6ce8\u5165\u6076\u610f\u4ee3\u7801\uff0c\u5f53\u5408\u6cd5\u7528\u6237\u8bbf\u95ee\u663e\u793a\u4fe1\u606f\u7684\u7279\u5b9aWeb\u90e8\u5206\u65f6\uff0c\u8fd9\u4e9b\u4ee3\u7801\u5c06\u88ab\u89e3\u91ca\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "IPCOMM ipDIO\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2022-20533\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "IPCOMM ipDIO 3.9"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2022-22985",
  "serverity": "\u4e2d",
  "submitTime": "2022-03-04",
  "title": "IPCOMM ipDIO\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2022-20533\uff09"
}

CVE-2022-22985 (GCVE-0-2022-22985)

Vulnerability from cvelistv5 – Published: 2022-03-09 15:33 – Updated: 2025-04-16 18:00

Title

ICSA-22-062-01 IPCOMM ipDIO

Summary

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the specific web section where the information is displayed. Injection can be done on specific parameters. The injected code is executed when a legitimate user attempts to review history.

Severity ?

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

icscert

References

URL

Tags

https://www.cisa.gov/uscert/ics/advisories/icsa-2…

x_refsource_MISC

Impacted products

	Vendor	Product	Version
	IPCOMM	IPCOMM ipDIO	Affected: 3.9

Credits

Aarón Flecha Menéndez of S21Sec reported these vulnerabilities to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:28:42.832Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-062-01"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-22985",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-16T17:31:07.238733Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-16T18:00:18.257Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "IPCOMM ipDIO",
          "vendor": "IPCOMM",
          "versions": [
            {
              "status": "affected",
              "version": "3.9"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Aar\u00f3n Flecha Men\u00e9ndez of S21Sec reported these vulnerabilities to CISA."
        }
      ],
      "datePublic": "2022-03-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the specific web section where the information is displayed. Injection can be done on specific parameters. The injected code is executed when a legitimate user attempts to review history."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-03-09T15:33:40.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-062-01"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "IPCOMM recommends upgrading to its ip4Cloud device, which is the successor to ipDIO. Contact IPCOMM customer support for assistance with the upgrade. For more information, visit the IPCOMM ip4Cloud product page."
        }
      ],
      "source": {
        "advisory": "ICSA-22-062-01",
        "discovery": "EXTERNAL"
      },
      "title": "ICSA-22-062-01 IPCOMM ipDIO",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2022-03-03T18:40:00.000Z",
          "ID": "CVE-2022-22985",
          "STATE": "PUBLIC",
          "TITLE": "ICSA-22-062-01 IPCOMM ipDIO"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "IPCOMM ipDIO",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "3.9",
                            "version_value": "3.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "IPCOMM"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Aar\u00f3n Flecha Men\u00e9ndez of S21Sec reported these vulnerabilities to CISA."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the specific web section where the information is displayed. Injection can be done on specific parameters. The injected code is executed when a legitimate user attempts to review history."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-062-01",
              "refsource": "MISC",
              "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-062-01"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "IPCOMM recommends upgrading to its ip4Cloud device, which is the successor to ipDIO. Contact IPCOMM customer support for assistance with the upgrade. For more information, visit the IPCOMM ip4Cloud product page."
          }
        ],
        "source": {
          "advisory": "ICSA-22-062-01",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2022-22985",
    "datePublished": "2022-03-09T15:33:40.335Z",
    "dateReserved": "2022-02-15T00:00:00.000Z",
    "dateUpdated": "2025-04-16T18:00:18.257Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2022-20533

CVE-2022-22985 (GCVE-0-2022-22985)

Tags

Sightings

Nomenclature