CVE-2022-41870: Innovaphone Firmware

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload.

Affected products

• Innovaphone Innovaphone Firmware: before 13r2 (fixed in 13r2); version 13r2 only

Published 2022-09-30. Last modified 2026-06-17.