{"id":"CVE-2022-36779","aliases":["EUVD-2022-39479","GHSA-g9gr-vqqf-qjh5"],"status":"published","title":"PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection","description":"PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02989,"percentile":0.87414,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-78"],"published":"2022-09-13T14:57:52Z","modified":"2026-06-17T04:53:57Z","exploits":[{"source":"pocgithub","id":"EmadYaY/CVE-2022-36779","title":"EmadYaY/CVE-2022-36779","date":"2024-06-03","url":"https://github.com/EmadYaY/CVE-2022-36779"},{"source":"pocgithub","id":"rootDR/CVE-2022-36779","title":"rootDR/CVE-2022-36779","date":"2023-12-24","url":"https://github.com/rootDR/CVE-2022-36779"},{"source":"pocgithub","id":"rootdr-backup/exploit-CVE-2022-36779","title":"rootdr-backup/exploit-CVE-2022-36779","date":"2025-08-11","url":"https://github.com/rootdr-backup/exploit-CVE-2022-36779"}],"products":[{"vendor":"advice","product":"icr_111wg_firmware"},{"vendor":"proscend","product":"advice icr 111wg"},{"vendor":"proscend","product":"m301-g_firmware"},{"vendor":"proscend","product":"m301-gw_firmware"},{"vendor":"proscend","product":"m330-w5_firmware"},{"vendor":"proscend","product":"m330-w_firmware"},{"vendor":"proscend","product":"m350-5g_firmware"},{"vendor":"proscend","product":"m350-6_firmware"},{"vendor":"proscend","product":"m350-w5g_firmware"},{"vendor":"proscend","product":"m350-w6_firmware"},{"vendor":"proscend","product":"proscend m301-g / m301-gw"},{"vendor":"proscend","product":"proscend m330-w / m330-w5"},{"vendor":"proscend","product":"proscend m350-5g / m350-w5g / m350-6 / m350-w6"}],"references":[{"url":"https://www.gov.il/en/departments/faq/cve_advisories","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36779"},{"url":"https://github.com/advisories/GHSA-g9gr-vqqf-qjh5"}],"sources":{"cve":[{"id":"CVE-2022-36779","title":"PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection","description":"PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301","status":"published","published":"2022-09-13T14:57:52.794Z","modified":"2024-09-16T16:33:09.23Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-39479","description":"PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301","status":"published","published":"2022-09-13T14:57:52Z","modified":"2024-09-16T16:33:09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:55:50.59293Z"}],"ghsa":[{"id":"GHSA-g9gr-vqqf-qjh5","title":"PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated...","description":"PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301","status":"published","published":"2022-09-14T00:00:48Z","modified":"2023-01-27T05:02:40Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:42:05.364036Z"}],"nvd":[{"id":"CVE-2022-36779","description":"PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301","status":"published","published":"2022-09-13T15:15:08.61Z","modified":"2026-06-17T04:53:57.787Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:07:27.631109Z"}]}}
