Vulnerability Details CVE-2022-29013
A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.927
EPSS Ranking 99.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://packetstormsecurity.com/files/166684/Razer-Sila-2.0.418-Command-Injection.html
- https://www.exploit-db.com/exploits/50865
- https://www2.razer.com/ap-en/desktops-and-networking/razer-sila
- https://packetstormsecurity.com/files/166684/Razer-Sila-2.0.418-Command-Injection.html
- https://www.exploit-db.com/exploits/50865
- https://www2.razer.com/ap-en/desktops-and-networking/razer-sila
Products affected by CVE-2022-29013
-
cpe:2.3:h:razer:sila:-
-
cpe:2.3:o:razer:sila_firmware:2.0.441_api-2.0.418