What’s Vulnerable › Vulnerabilities

CVE-2022-23332

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-05-09 · updated 2026-06-17
• Weakness: CWE-94

Description

Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field.

Affected products

• Ejointech Acom508 Firmware: through 508-609-900-241-100-020
• Ejointech Acom516 Firmware: all versions
• Ejointech Acom532 Firmware: through 532-609-915-041-100-020

References

• http://en.ejointech.com/
• https://drive.google.com/drive/folders/1QRs6wos3mL9289TTUm98n5OmgBVrbYTx
• https://github.com/kyl3song/CVE/tree/main/CVE-2022-23332
• http://en.ejointech.com/
• https://drive.google.com/drive/folders/1QRs6wos3mL9289TTUm98n5OmgBVrbYTx
• https://github.com/kyl3song/CVE/tree/main/CVE-2022-23332

Get alerted when CVE-2022-23332 or the next vulnerability affects your stack