High severity8.8NVD Advisory· Published Dec 25, 2022· Updated Jun 17, 2026
CVE-2022-40005
CVE-2022-40005
Description
Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:intelbras:wifiber_120ac_inmesh_firmware:*:*:*:*:*:*:*:*Range: >=1.1-220216,<1.1-220826
- Intelbras/WiFiber 120AC inMeshdescription
- Range: <1-1-220826
Patches
Vulnerability mechanics
References
2- cyberdanube.com/en/authenticated-command-injection-in-intelbras-wifiber-120ac-inmesh/nvdExploitPatchThird Party Advisory
- seclists.org/fulldisclosure/2022/Dec/13nvdExploitMailing ListPatchThird Party Advisory
News mentions
0No linked articles in our index yet.