Remote Command Injection Vulnerability in Shenzhen Ejoin ACOM508/ACOM516/ACOM532 Manual Ping Form

CVE-2022-23332 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field.

Learn more about our Web App Pen Testing.