CVE-2022-29539

resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sent as input before they are processed on the server. Due to the lack of validation of user input, an unauthenticated attacker can bypass the syntax intended by the software (e.g., concatenate `&|;\r\ commands) and inject arbitrary system commands with the privileges of the application user.

• CWE-78

• https://www.gruppotim.it/it/footer/red-team.htmlThird Party Advisory
• https://www.resi.it/prodotti-soluzioni-commerciali/gemini-network-service-monitoringProduct, Vendor Advisory
• https://www.gruppotim.it/it/footer/red-team.htmlThird Party Advisory
• https://www.resi.it/prodotti-soluzioni-commerciali/gemini-network-service-monitoringProduct, Vendor Advisory

Published

May 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29533An issue was discovered in MISP before 2.4.158. There is XSS…6.1
• CVE-2022-29534An issue was discovered in MISP before 2.4.158. In UsersCont…7.5
• CVE-2022-29535Zoho ManageEngine OPManager through 125588 allows SQL Inject…9.8
• CVE-2022-29536In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML …7.5
• CVE-2022-29537gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0…5.5
• CVE-2022-29538RESI Gemini-Net Web 4.2 is affected by Improper Access Contr…5.3
• CVE-2022-29540resi-calltrace in RESI Gemini-Net 4.2 is affected by Multipl…6.1
• CVE-2022-29546HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial…7.5
• CVE-2022-29547The CreateRedirect extension before 2022-04-14 for MediaWiki…7.5
• CVE-2022-29548A reflected XSS issue exists in the Management Console of se…6.1
• CVE-2022-29549An issue was discovered in Qualys Cloud Agent 4.8.0-49. It e…7.3
• CVE-2022-29550An issue was discovered in Qualys Cloud Agent 4.8.0-49. It w…5.5