CVE-2022-34850

Name of the Vulnerable Software and Affected Versions Robustel R1510 versions 3.1.16 through 3.3.0

Description A command injection issue exists in the web server's /action/import authorized keys/ functionality. This allows an attacker to execute arbitrary commands by sending specially crafted network requests.

Recommendations For versions 3.1.16 through 3.3.0, consider restricting access to the /action/import authorized keys/ functionality until a fix is available. As a temporary workaround, limit the ability to send sequences of requests to this endpoint to minimize the risk of exploitation.