What is the severity of CVE-2022-0365?

CVE-2022-0365 is considered a critical vulnerability due to the potential for authenticated OS command injection by an attacker.

How do I fix CVE-2022-0365?

To fix CVE-2022-0365, update the affected Ricon Mobile S9922L or S9922XL firmware to the latest version provided by the vendor.

What products are affected by CVE-2022-0365?

CVE-2022-0365 affects the Ricon Mobile S9922L and S9922XL firmware versions 16.10.3.

What kind of attack can be performed using CVE-2022-0365?

CVE-2022-0365 can allow an attacker to execute arbitrary shell commands with root privileges on the affected devices.

Is CVE-2022-0365 an authentication-related vulnerability?

Yes, CVE-2022-0365 is an authenticated vulnerability that requires an attacker to have valid credentials for exploitation.

Vulnerability/
CVE-2022-0365

critical

CWE

78 77

4/2/2022

17/9/2024

CVE-2022-0365: Ricon Mobile, Inc.

First published: Fri Feb 04 2022(Updated: )

The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary shell commands as the Admin (root) user.

Credit: ics-cert@hq.dhs.gov

Affected Software	Affected Version	How to fix
Ricon Mobile S9922XL
Riconmobile S9922L
Ricon Mobile S9922L Firmware	=16.10.3
Ricon Mobile S9922L Firmware
Ricon Mobile S9922XL	=16.10.3
Ricon Mobile S9922XL

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

ICSA-22-032-01

Frequently Asked Questions

What is the severity of CVE-2022-0365?
CVE-2022-0365 is considered a critical vulnerability due to the potential for authenticated OS command injection by an attacker.
How do I fix CVE-2022-0365?
To fix CVE-2022-0365, update the affected Ricon Mobile S9922L or S9922XL firmware to the latest version provided by the vendor.
What products are affected by CVE-2022-0365?
CVE-2022-0365 affects the Ricon Mobile S9922L and S9922XL firmware versions 16.10.3.
What kind of attack can be performed using CVE-2022-0365?
CVE-2022-0365 can allow an attacker to execute arbitrary shell commands with root privileges on the affected devices.
Is CVE-2022-0365 an authentication-related vulnerability?
Yes, CVE-2022-0365 is an authenticated vulnerability that requires an attacker to have valid credentials for exploitation.

agent/weakness
agent/type
agent/title
agent/author
agent/description
agent/references
agent/severity
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/trending
agent/source
collector/ics-cert-advisory
source/ICS
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/softwarecombine
agent/tags
collector/nvd-index
vendor/ricon mobile, inc.
canonical/ricon mobile s9922xl
canonical/riconmobile s9922l
vendor/riconmobile
canonical/ricon mobile s9922l firmware
version/ricon mobile s9922l firmware/16.10.3
version/ricon mobile s9922xl/16.10.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.