CVE-2022-23770

9.8 criticalEPSS 1.7%

Critical (9.8) in wisa smart wing cms. EPSS 1.7% chance of exploitation in the next 30 days.

This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of certain API constructors. Remote attackers could use this vulnerability to execute malicious commands such as directory traversal.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-20
Published: 2022-10-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wisa:smart_wing_cms

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66963
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66963

Check your stack JSON