CVE-2022-38399 Information

Description

Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product’s specific serial connection

Reference

https://www.planex.co.jp/products/cs-qr10/index.shtml https://www.planex.co.jp/products/cs-qr20/index.shtml https://jvn.jp/en/vu/JVNVU90766406/index.html