Vulnerability Details CVE-2022-4221
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.049
EPSS Ranking 89.1%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-4221
-
cpe:2.3:h:asus:nas-m25:-
-
cpe:2.3:o:asus:nas-m25_firmware:*