CVE-2022-23332: Ejointech ACOM508 Firmware

High severity, CVSS 8.8. EPSS: 5.1% chance of exploitation in the next 30 days.

Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field.

Affected products

• Ejointech ACOM508 Firmware: up to and including 508-609-900-241-100-020
• Ejointech ACOM516 Firmware: affected versions not specified
• Ejointech ACOM532 Firmware: up to and including 532-609-915-041-100-020

Published 2022-05-09. Last modified 2026-06-17.