CVE-2022-32429

CRITICO 9.8CVE-2022-32429 · Published 10/08/2022 · updated 17/06/2026

In breve

CVE-2022-32429 è una vulnerabilità CRITICO (CVSS 9.8).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 75.9%, superiore al 99.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MNT.2408 allows unauthenticated attackers to arbitrarily configure settings within the application, leading to remote code execution.

References

packetstormsecurity.com/files/169819/MSNSwitch-Firmware-MNT.2408-Remote-Code-Execution.html · Exploit
elifulkerson.com/CVE-2022-32429 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free