Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2022-29897

Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS due to an improper input validation in all versions of the firmware.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT RAD-ISM-900-EN-BD/B

  • All Versionsaffected

PHOENIX CONTACT RAD-ISM-900-EN-BD

  • All Versionsaffected

PHOENIX CONTACT RAD-ISM-900-EN-BD-BUS

  • All Versionsaffected

References