CVE-2022-35262

Name of the Vulnerable Software and Affected Versions Robustel R1510 versions 3.1.16 through 3.3.0

Description A denial of service issue exists in the web server hashFirst functionality. It can be triggered by a specially-crafted network request, allowing an attacker to send a sequence of requests to cause a denial of service. The denial of service occurs in the "/action/import xml file/" API endpoint.

Recommendations For versions 3.1.16 through 3.3.0, as a temporary workaround, consider restricting access to the "/action/import xml file/" API endpoint until a patch is available. Avoid using this endpoint in production environments to minimize the risk of exploitation.