deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-29889
Published: 2022-10-25
Description: A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. Use of a hard-coded root password can lead to arbitrary command execution. An attacker can authenticate with hard-coded credentials to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1569; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1569
CVE: CVE-2022-2762
Published: 2022-10-25
Description: The AdminPad WordPress plugin before 2.2 does not have CSRF check when updating admin's note, allowing attackers to make a logged in admin update their notes via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/cf0b3893-3283-46d6-a497-f3110a35d42a; https://wpscan.com/vulnerability/cf0b3893-3283-46d6-a497-f3110a35d42a
CVE: CVE-2022-30541
Published: 2022-10-25
Description: An OS command injection vulnerability exists in the XCMD setUPnP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1557; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1557
CVE: CVE-2022-30603
Published: 2022-10-25
Description: An OS command injection vulnerability exists in the web interface /action/iperf functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1562; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1562
CVE: CVE-2022-32454
Published: 2022-10-25
Description: A stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to remote code execution. An attacker can send a malicious XML payload to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1560; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1560
CVE: CVE-2022-32574
Published: 2022-10-25
Description: A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to memory corruption. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1565; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1565
CVE: CVE-2022-32586
Published: 2022-10-25
Description: An OS command injection vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1563; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1563
CVE: CVE-2022-32760
Published: 2022-10-25
Description: A denial of service vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to denial of service. An attacker can send a malicious XML payload to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-489
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1555; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1555
CVE: CVE-2022-32765
Published: 2022-10-25
Description: An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1576; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1576
CVE: CVE-2022-32773
Published: 2022-10-25
Description: An OS command injection vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1556; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1556
CVE: CVE-2022-32775
Published: 2022-10-25
Description: An integer overflow vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to memory corruption. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1564; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1564
CVE: CVE-2022-33150
Published: 2022-10-25
Description: An OS command injection vulnerability exists in the js_package install functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1577; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1577
CVE: CVE-2022-33189
Published: 2022-10-25
Description: An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1558; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1558
CVE: CVE-2022-33192
Published: 2022-10-25
Description: Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability specifically focuses on the unsafe use of the `WL_SSID` and `WL_SSID_HEX` configuration values in the function at offset `0x1c7d28` of firmware 6.9Z.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559
CVE: CVE-2022-33193
Published: 2022-10-25
Description: Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability specifically focuses on the unsafe use of the `WL_WPAPSK` configuration value in the function located at offset `0x1c7d28` of firmware 6.9Z.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559
CVE: CVE-2022-33194
Published: 2022-10-25
Description: Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `WL_Key` and `WL_DefaultKeyID` configuration values in the function located at offset `0x1c7d28` of firmware 6.9Z , and even more specifically on the command execution occuring at offset `0x1c7f6c`.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559
CVE: CVE-2022-33195
Published: 2022-10-25
Description: Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `WL_DefaultKeyID` in the function located at offset `0x1c7d28` of firmware 6.9Z, and even more specifically on the command execution occuring at offset `0x1c7fac`.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1559
CVE: CVE-2022-33204
Published: 2022-10-25
Description: Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `ssid_hex` HTTP parameter to construct an OS Command at offset `0x19afc0` of the `/root/hpgw` binary included in firmware 6.9Z.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568
CVE: CVE-2022-33205
Published: 2022-10-25
Description: Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `wpapsk_hex` HTTP parameter to construct an OS Command at offset `0x19b0ac` of the `/root/hpgw` binary included in firmware 6.9Z.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568
CVE: CVE-2022-33206
Published: 2022-10-25
Description: Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on the unsafe use of the `key` and `default_key_id` HTTP parameters to construct an OS Command crafted at offset `0x19b1f4` of the `/root/hpgw` binary included in firmware 6.9Z.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568
CVE: CVE-2022-33207
Published: 2022-10-25
Description: Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability focuses on a second unsafe use of the `default_key_id` HTTP parameter to construct an OS Command at offset `0x19B234` of the `/root/hpgw` binary included in firmware 6.9Z.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1568
CVE: CVE-2022-33757
Published: 2022-10-25
Description: An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target and/or the Nessus scan to unauthorized parties able to reach the Nessus instance.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://www.tenable.com/security/tns-2022-11; https://www.tenable.com/security/tns-2022-11
CVE: CVE-2022-33897
Published: 2022-10-25
Description: A directory traversal vulnerability exists in the web_server /ajax/remove/ functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1579; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1579
CVE: CVE-2022-33938
Published: 2022-10-25
Description: A format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted XCMD can lead to memory corruption, information disclosure and denial of service. An attacker can send a malicious XML payload to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1584; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1584
CVE: CVE-2022-34845
Published: 2022-10-25
Description: A firmware update vulnerability exists in the sysupgrade functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network packet can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 2.7 (LOW)
CWE: CWE-345
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1580; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1580
CVE: CVE-2022-34850
Published: 2022-10-25
Description: An OS command injection vulnerability exists in the web_server /action/import_authorized_keys/ functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1578; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1578
CVE: CVE-2022-34870
Published: 2022-10-25
Description: Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.openwall.com/lists/oss-security/2022/10/24/3; https://lists.apache.org/thread/zltlr7f2ymr2m6jj54k4z0c4foos5fwx; http://www.openwall.com/lists/oss-security/2022/10/24/3
CVE: CVE-2022-35132
Published: 2022-10-25
Description: Usermin through 1.850 allows a remote authenticated user to execute OS commands via command injection in a filename for the GPG module.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/ly1g3/webmin-usermin-vulnerabilities; https://webmin.com/uchanges.html; https://github.com/ly1g3/webmin-usermin-vulnerabilities
CVE: CVE-2022-35244
Published: 2022-10-25
Description: A format string injection vulnerability exists in the XCMD getVarHA functionality of abode systems, inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to memory corruption, information disclosure, and denial of service. An attacker can send a malicious XML payload to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134, CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1582; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1582
CVE: CVE-2022-35261
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_authorized_keys/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35262
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_xml_file/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35263
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_file/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35264
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_aaa_cert_file/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35265
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_nodejs_app/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35266
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_firmware/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35267
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_https_cert_file/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35268
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_sdk_file/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-755
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35269
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_e2c_json_file/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35270
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_wireguard_cert_file/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35271
Published: 2022-10-25
Description: A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_cert_file/` API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1575
CVE: CVE-2022-35739
Published: 2022-10-25
Description: PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrary Cascading Style Sheets (CSS) data is inserted into the style tag, loading malicious content. Due to PRTG Network Monitor preventing “characters, and from modern browsers disabling JavaScript support in style tags, this vulnerability could not be escalated into a Cross-Site Scripting vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://raxis.com/blog/cve-2022-35739; https://www.paessler.com/prtg/history/stable; https://raxis.com/blog/cve-2022-35739