CVE-2022-42490

Name of the Vulnerable Software and Affected Versions Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020

Description Several OS command injection vulnerabilities exist in the m2m binary. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities. This command injection is reachable through the m2m's DOWNLOAD CFG FILE command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.