CVE-2022-28223: Tekon Kio-1m Firmware

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin.

Affected products

• Tekon Kio-1m Firmware: up to and including 2022-03-30
• Tekon Kio-2m Firmware: up to and including 2022-03-30
• Tekon Kio-2md Firmware: up to and including 2022-03-30
• Tekon Kio-2mrs Firmware: up to and including 2022-03-30
• Tekon Kio-2ms Firmware: up to and including 2022-03-30
• Tekon Kio-8(4) Firmware: up to and including 2022-03-30
• Tekon Kio-8(4)l Firmware: up to and including 2022-03-30
• Tekon Kio Firmware: up to and including 2022-03-30

Published 2022-03-30. Last modified 2026-06-17.