CVE-2022-46361CWE-77

Physical access to the WDM enables use of USB device to gain access to the WDM

Medium · published May 30, 2023

CVSS v3.1
6.9
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execution of unwanted commands. This issue affects OneWireless all versions up to 322.1 and fixed in version 322.2.

The record
Technical detail
CVSS v3.1
6.9 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.3th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2023-05-30T16:21Z
EPSS history
Timeline
  • 30 MAY 16:21Z
    Physical access to the WDM enables use of USB device to gain access to the WDM
    cvelistv5