AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-42490

CRITICAL · CVSS 9.8 EPSS 3.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-42490
Severity
CRITICAL
CVSS
9.8
EPSS
3.47%

Original NVD Description

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is reachable through the m2m's DOWNLOAD_CFG_FILE command