CVE:CVE-2022-41870
CNNVD:CNNVD-202209-3165
innovaphone AG是德国innovaphone AG公司的一个 IP 电话领域提供个性化和复杂业务通信解决方案的专家。
Innovaphone 13r2 Service Release 17之前版本存在命令注入漏洞。攻击者利用该漏洞修改服务ID并注入命令。
solution:Upgrade innovaphone innovaphone_firmware to a higher version than 13r2,13r2,13r2:service_release_12,13r2:service_release_13,13r2:service_release_14,13r2:service_release_15,13r2:service_release_16,and avoid the version (,13r2),13r2,13r2:service_release_12,13r2:service_release_13,13r2:service_release_14,13r2:service_release_15,13r2:service_release_16