Vulnerabilities > IP COM > M50 Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-12-23 CVE-2022-45710 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45709 OS Command Injection vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.
network
low complexity
ip-com CWE-78
critical
9.8
2022-12-23 CVE-2022-45708 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45707 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.
network
low complexity
ip-com CWE-120
critical
9.8
2022-12-23 CVE-2022-45706 Classic Buffer Overflow vulnerability in Ip-Com M50 Firmware 15.11.0.33
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.
network
low complexity
ip-com CWE-120
critical
9.8