CVE-2022-32585CWE-489

A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0

Critical · published June 30, 2022

CVSS v3.0
9.1
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

🚨 A sneaky crafted request is all it takes! This command execution vulnerability in Robustel R1510's clish art2 function can lead to arbitrary command execution. 🔥 Think of it like an overzealous restaurant waiter who accepts any order without checking the menu first — one wrong request could have them whipping up something dangerous! An attacker could potentially execute any command they desire on the device, leading to a complete system takeover. This could be absolutely devastating for networks relying on the Robustel R1510, making devices vulnerable to remote manipulation or data breaches.

Put simply

Think of it like an overzealous restaurant waiter who accepts any order without checking the menu first — one wrong request could have them whipping up something dangerous! The vulnerability allows attackers to send a specially crafted network request that bypasses security checks, leading to arbitrary command execution on the device.

What to do

An attacker could potentially execute any command they desire on the device, leading to a complete system takeover. This could be absolutely devastating for networks relying on the Robustel R1510, making devices vulnerable to remote manipulation or data breaches. Immediate action is crucial! Upgrade the Robustel R1510 firmware to version 3.3.1 or later to mitigate this risk. Additionally, review network configurations to limit unsolicited requests to the device. You've got this! Take these steps, and you'll safeguard your device in no time. 🛡️

The record
Technical detail
CVSS v3.0
9.1 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03021 · 87.4th percentile
Weakness
CWE-489 · Active Debug Code
Published
2022-06-30T19:05Z
EPSS history
Timeline
  • 30 JUN 19:05Z
    A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0
    cvelistv5