High severity8.8NVD Advisory· Published Nov 25, 2022· Updated Jun 17, 2026
CVE-2022-40282
CVE-2022-40282
Description
The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is BSECV-2022-21.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Hirschmann/BAT-C2description
- Range: <09.13.01.00R04
- cpe:2.3:o:belden:hirschmann_bat-c2_firmware:*:*:*:*:*:*:*:*Range: <09.13.00r04
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/170063/Hirschmann-Belden-BAT-C2-8.8.1.0R8-Command-Injection.htmlnvdExploitThird Party Advisory
- seclists.org/fulldisclosure/2022/Nov/19nvdExploitThird Party Advisory
- www.belden.com/support/security-assurancenvdBroken Link
News mentions
0No linked articles in our index yet.