CVE-2022-32429: Megatech Msnswitch Firmware

Critical severity, CVSS 9.8. EPSS: 75.6% chance of exploitation in the next 30 days.

An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MNT.2408 allows unauthenticated attackers to arbitrarily configure settings within the application, leading to remote code execution.

Affected products

• Megatech Msnswitch Firmware: version mnt.2408 only

Published 2022-08-10. Last modified 2026-06-17.