cb
cvebase
.
~
/
products
/
asus
/
nas-m25
Search CVEs, products, detections…
⌘K
pipeline live
Digest
Docs
Home
/
Products
/
asus
/
Asus Nas-M25
Asus Nas-M25 vulnerabilities
1 known vulnerability affecting
asus/nas-m25
.
Track
Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL
1
Vulnerabilities
Sort
Most important
Highest Priority
Highest EPSS
Highest CVSS
Newest
Oldest
Page 1 of 1
CVE-2022-4221
P2
CRITICAL
CVSS 9.8
≤ 1.0.1.7
2022-12-01
CVE-2022-4221 [CRITICAL] CWE-78 CVE-2022-4221: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7.
nvd
Asus Nas-M25 vulnerabilities | cvebase