CVE-2022-26481: OS Command Injection
First published: Sun Jul 17 2022(Updated: )
An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (CSR) action.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Poly Studio X30 Firmware | <3.7.0 | |
| Poly Studio X30 | ||
| Poly Studio X70 Firmware | <3.7.0 | |
| Poly Studio X70 | ||
| Poly G7500 Firmware | <3.7.0 | |
| Poly G7500 | ||
| Poly Studio X50 Firmware | <3.7.0 | |
| Poly Studio X50 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-26481?
The severity of CVE-2022-26481 is high with a CVSS score of 8.8.
What can occur due to CVE-2022-26481?
Command Injection can occur via the CN field of a Create Certificate Signing Request (CSR) action.
What is the affected software of CVE-2022-26481?
The affected software includes Poly Studio X30 Firmware, Poly Studio X70 Firmware, Poly G7500 Firmware, and Poly Studio X50 Firmware.
How can I fix CVE-2022-26481?
Update to Poly Studio version 3.7.0 or later to fix CVE-2022-26481.
Where can I find more information about CVE-2022-26481?
You can find more information about CVE-2022-26481 in the following references: [Sec Consult Advisory](https://sec-consult.com/vulnerability-lab/advisory/authenticated-command-injection-in-poly-studio/) and [Poly Security Center](https://www.poly.com/us/en/support/security-center).
- collector/nvd-index
- agent/weakness
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/poly
- canonical/poly studio x30 firmware
- canonical/poly studio x30
- canonical/poly studio x70 firmware
- canonical/poly studio x70
- canonical/poly g7500 firmware
- canonical/poly g7500
- canonical/poly studio x50 firmware
- canonical/poly studio x50