CVE-2022-43367: IP-Com EW9 Firmware

Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days.

IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function.

Affected products

• IP-Com EW9 Firmware: version 15.11.0.14 only

Published 2022-10-27. Last modified 2026-06-17.