What’s Vulnerable › Vulnerabilities

CVE-2022-24432: ICSA-22-062-01 IPCOMM ipDIO

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-10 · updated 2026-06-17
• Weakness: CWE-79

Description

Persistent cross-site scripting (XSS) in the web interface of ipDIO allows an authenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into specific fields. The XSS payload will be executed when a legitimate user attempts to upload, copy, download, or delete an existing configuration (Administrative Services).

Affected products

• IPCOMM ipDIO: 3.9

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-062-01
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-062-01

Get alerted when CVE-2022-24432 or the next vulnerability affects your stack