What’s Vulnerable › Vulnerabilities

CVE-2022-38399

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-08 · updated 2026-06-17
• Weakness: CWE-287

Description

Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product's specific serial connection

Affected products

• Planex Cs-Qr10 Firmware: all versions
• Planex Cs-Qr20 Firmware: all versions

References

• https://jvn.jp/en/vu/JVNVU90766406/index.html
• https://www.planex.co.jp/products/cs-qr10/index.shtml
• https://www.planex.co.jp/products/cs-qr20/index.shtml
• https://jvn.jp/en/vu/JVNVU90766406/index.html
• https://www.planex.co.jp/products/cs-qr10/index.shtml
• https://www.planex.co.jp/products/cs-qr20/index.shtml

Get alerted when CVE-2022-38399 or the next vulnerability affects your stack