CVE-2022-26482
high · 7.2An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin.
7.2
CVSS
22.8%
EPSS (exploit prob.)
98th
EPSS percentile
2022-07-17
Published
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| poly | eagleeye_director_ii_firmware | < 2.2.2.1 |
| poly | eagleeye_director_ii | all versions |
Check a specific version with /api/v1/cve/match.
References
- https://sec-consult.com/de/vulnerability-lab/advisory/poly-eagleeye-director-ii-kritische-schwachstellen/
- https://sec-consult.com/vulnerability-lab/advisory/critical-vulnerabilities-poly-eagleeye-director-ii/
- https://www.poly.com/us/en/support/security-center
- https://sec-consult.com/de/vulnerability-lab/advisory/poly-eagleeye-director-ii-kritische-schwachstellen/
- https://sec-consult.com/vulnerability-lab/advisory/critical-vulnerabilities-poly-eagleeye-director-ii/
- https://www.poly.com/us/en/support/security-center
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-26482