CVE-2022-40005

CVSS 3.1: 8.8 high
EPSS: 35%p98
Published: Dec 25, 2022 · Dec 25, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-40005 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute.

Vendors: intelbras

Products: wifiber 120ac inmesh firmware

Weakness: CWE-78

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (35.0%)

In the news

3 stories

Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet

The Hacker NewsJan 23, 05:18 UTC · Jan 23, 2025Exploit / PoCCVE-2013-3307 CVE-2016-20016 CVE-2017-5259+71

New Mirai botnet targets tens of flaws in popular IoT devices

Security AffairsJun 22, 20:58 UTC · Jun 22, 2023MalwareCVE-2019-12725 CVE-2019-17621 CVE-2019-20500+131

IoT Under Siege: The Anatomy of the Latest Mirai Campaign Leveraging Multiple IoT Exploits

Unit 42 tracks a Mirai botnet campaign exploiting over 20 IoT vulnerabilities in routers, cameras and DVRs to build DDoS botnets since March 2023.

Palo Alto Unit 42Aug 17, 13:04 UTC · Aug 17, 2026MalwareExploitedCVE-2019-12725 CVE-2019-17621 CVE-2019-20500+133 · 1 read