NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2022-36553

CVSS 3.1: 9.8 critical
EPSS: 91%p100
Published: Aug 29, 2022 · Aug 29, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-36553 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi.

Vendors: hytec

Products: hwl-2511-ss firmware

Weakness: CWE-77

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (90.9%)

In the news

4 stories

ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes

ClingSTUN exploits unpatched IoT flaws and uses public STUN servers to run proxy nodes.

Infosecurity MagazineOct 5, 14:30 UTC · 26d agoMalwareExploitedCVE-2022-36553 CVE-2025-34035 CVE-2024-23625+46 · 1 read

76

ClingSTUN Malware Turns Vulnerable IoT Devices Into Persistent Remote Proxy Nodes

ClingSTUN exploits unpatched IoT devices and turns them into persistent proxy nodes using public STUN.

GBHackersOct 6, 05:03 UTC · 25d agoMalwareExploitedCVE-2022-36553 CVE-2023-1389 CVE-2024-23625+12 · 2 reads

68

ClingSTUN Backdoor Exploits Multiple IoT Vulnerabilities to Gain Persistent Remote Access

Fortinet documents ClingSTUN, a Linux IoT backdoor exploiting multiple vendor flaws to build persistent proxy nodes with STUN-based control.

Cyber Security NewsOct 6, 09:07 UTC · 25d agoMalwareExploitedCVE-2022-36553 CVE-2025-34035 CVE-2024-23625+22

60

RondoDox Botnet targets 56 flaws across 30+ device types worldwide

Security AffairsOct 10, 07:33 UTC · Oct 10, 2025MalwareCVE-2024-3721 CVE-2024-12856 CVE-2023-1389+332 · 1 read

60