CVE-2022-29303
contec sv-cpt-mc310 firmware
Published 12 May 2022 · updated 17 Jun 2026 · Analyzed
9.8 Critical · CVSS 3.1, NVD
Exploited in the wild
CISA added this to its Known Exploited Vulnerabilities catalog on 13 Jul 2023, with a remediation deadline of 3 Aug 2023 for US federal agencies.
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Description
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
References
- packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.html · Exploit, Third Party Advisory
- drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g?usp=sharing · Exploit, Third Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-29303 · US Government Resource