CVE-2022-45717: IP-Com m50 Firmware

Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days.

IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request.

Affected products

• IP-Com m50 Firmware: version 15.11.0.33 only

Published 2022-12-23. Last modified 2026-06-17.