CVE-2022-29152: ericom powerterm webconnect – CVSS 6.1 · Watchpost

← All vulnerabilities

CVE-2022-29152

中危 6.1CVE-2022-29152 · Published 28/04/2022 · updated 17/06/2026

要点

CVE-2022-29152 是影响 powerterm webconnect (ericom) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.57%，高于 47.3% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
powerterm webconnect ericom	`= 6.0`	No fix yet

Description

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page.

References

the-emmons/CVE-Disclosures · Third Party Advisory
ericom.com/powerterm/webconnect-hostview · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free