CVE-2022-1410: DEVICE42 Cmdb

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authenticated attacker to execute remote code on the device. This issue affects: Device42 CMDB version 18.01.00 and prior versions.

Affected products

• DEVICE42 Cmdb: before 18.01.00 (fixed in 18.01.00)

Published 2022-08-17. Last modified 2026-06-17.