CVE-2022-34850: Robustel r1510 Firmware

High severity, CVSS 7.2. EPSS: 3.5% chance of exploitation in the next 30 days.

An OS command injection vulnerability exists in the web_server /action/import_authorized_keys/ functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.

Affected products

• Robustel r1510 Firmware: version 3.1.16 only; version 3.3.0 only

Published 2022-10-25. Last modified 2026-06-17.