High severity8.8NVD Advisory· Published Mar 10, 2022· Updated Jun 17, 2026
CVE-2022-22985
CVE-2022-22985
Description
The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the specific web section where the information is displayed. Injection can be done on specific parameters. The injected code is executed when a legitimate user attempts to review history.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 3.9
Patches
Vulnerability mechanics
References
1- www.cisa.gov/uscert/ics/advisories/icsa-22-062-01nvdMitigationThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.