IP-COM records

21 published records for vendor ip-com.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 5
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')13
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

21 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
45Plan	CVE-2022-45711No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTip-com · m50 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	20.2%	Dec 23, 2022
41Plan	CVE-2022-45005No exploit	IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function.ip-com · ew9 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	5.4%	Dec 13, 2022
41Plan	CVE-2022-43367No exploit	IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function.ip-com · ew9 firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	5.2%	Oct 27, 2022
40Plan	CVE-2022-45709No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule paraip-com · m50 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	4.3%	Dec 23, 2022
40Plan	CVE-2022-45717No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUip-com · m50 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	4.3%	Dec 23, 2022
39Monitor	CVE-2022-45708No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping functionip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45710No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the forip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45712No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.ip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45714No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.ip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45715No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the ip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45716No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function.ip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45719No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.ip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45718No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function.ip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45721No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function.ip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45720No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBinip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45706No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.ip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
39Monitor	CVE-2022-45707No exploit	IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.ip-com · m50 firmware · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.1%	Dec 23, 2022
36Monitor	CVE-2026-2017No exploit	IP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflowip-com · w30ap firmware · CWE-119 Pre-auth Memory safety	High8.9	—	4.6%	Feb 6, 2026
30Monitor	CVE-2022-43365No exploit	IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function.ip-com · ew9 firmware · CWE-120 Pre-auth Memory safety Denial of service	High7.5	—	0.9%	Oct 27, 2022
30Monitor	CVE-2022-43366No exploit	IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via the checkLoginUser, ate, telnet, version, ip-com · ew9 firmware Pre-auth	High7.5	—	0.8%	Oct 27, 2022
30Monitor	CVE-2022-43364No exploit	An access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to arbitrarily change thip-com · ew9 firmware Pre-auth	High7.5	—	0.7%	Oct 27, 2022

CVE-2022-45711
45Plan
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckT
CriticalCVSS 9.8No exploitEPSS 20%
- pre-auth RCE
- Command injection
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45005
41Plan
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function.
CriticalCVSS 9.8No exploitEPSS 5%
- pre-auth RCE
- Command injection
ip-com · ew9 firmwareDec 13, 2022
CVE-2022-43367
41Plan
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function.
CriticalCVSS 9.8No exploitEPSS 5%
- pre-auth RCE
- Command injection
ip-com · ew9 firmwareOct 27, 2022
CVE-2022-45709
40Plan
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule para
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
- Command injection
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45717
40Plan
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetU
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
- Command injection
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45708
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45710
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the for
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45712
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45714
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45715
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45716
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45719
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45718
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45721
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45720
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBin
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45706
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2022-45707
39Monitor
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
ip-com · m50 firmwareDec 23, 2022
CVE-2026-2017
36Monitor
IP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflow
HighCVSS 8.9No exploitEPSS 5%
- Pre-auth
- Memory safety
ip-com · w30ap firmwareFeb 6, 2026
CVE-2022-43365
30Monitor
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
ip-com · ew9 firmwareOct 27, 2022
CVE-2022-43366
30Monitor
IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via the checkLoginUser, ate, telnet, version,
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
ip-com · ew9 firmwareOct 27, 2022
CVE-2022-43364
30Monitor
An access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to arbitrarily change th
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
ip-com · ew9 firmwareOct 27, 2022