CVE-2022-45709: IP-Com m50 Firmware

Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days.

IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.

Affected products

• IP-Com m50 Firmware: version 15.11.0.33 only

Published 2022-12-23. Last modified 2026-06-17.