CVE-2022-3091

RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak credentials. In some circumstances, an attacker can exploit this vulnerability to execute operating system (OS) commands.

• CWE-200

• https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-02Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-02Third Party Advisory, US Government Resource

Published

Jan 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30898A Cross-site request forgery (CSRF) vulnerability in Cscms m…6.5
• CVE-2022-30899A Cross Site Scripting vulnerabilty exists in PartKeepr 1.4.…4.8
• CVE-2022-3090Red Lion Controls Crimson 3.0 versions 707.000 and prior, Cr…5.3
• CVE-2022-30903Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3F…4.8
• CVE-2022-30904In Bestechnic Bluetooth Mesh SDK (BES2300) V1.0, a buffer ov…8.8
• CVE-2022-30909H3C Magic R100 R100V100R005 was discovered to contain a stac…9.8
• CVE-2022-30910H3C Magic R100 R100V100R005 was discovered to contain a stac…9.8
• CVE-2022-30912H3C Magic R100 R100V100R005 was discovered to contain a stac…9.8
• CVE-2022-30913H3C Magic R100 R100V100R005 was discovered to contain a stac…9.8
• CVE-2022-30914H3C Magic R100 R100V100R005 was discovered to contain a stac…9.8
• CVE-2022-30915H3C Magic R100 R100V100R005 was discovered to contain a stac…9.8
• CVE-2022-30916H3C Magic R100 R100V100R005 was discovered to contain a stac…9.8