Vulnerability identifier: #VU72390

Vulnerability risk: Critical

CVSSv3.1: 9.3 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C]

CVE-ID: CVE-2022-4257

CWE-ID: CWE-78

Exploitation vector: Network

Exploits in database: 1

• February 20, 2023
  • C-Data Wi-Fi Web管理系统存在未授权RCE漏洞 [Custom exploits]

Impact: Code execution

Vulnerable software:
C-DATA Web Management System
Web applications / Remote management & hosting panels

Vendor: C-Data Technology Co.,Ltd.