CVE-2022-33150

An OS command injection vulnerability exists in the js_package install functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.

• CWE-78

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1577Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1577Exploit, Third Party Advisory

Published

Oct 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-33145Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-33146Open redirect vulnerability in web2py versions prior to 2.22…6.1
• CVE-2022-33147A sql injection vulnerability exists in the ObjectYPT functi…8.8
• CVE-2022-33148A sql injection vulnerability exists in the ObjectYPT functi…8.8
• CVE-2022-33149A sql injection vulnerability exists in the ObjectYPT functi…8.8
• CVE-2022-3315Type confusion in Blink in Google Chrome prior to 106.0.5249…8.8
• CVE-2022-33151Cross-site scripting vulnerability in the specific parameter…6.1
• CVE-2022-33154The schema (aka Embedding schema.org vocabulary) extension b…5.4
• CVE-2022-33155The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cook…5.4
• CVE-2022-33156The matomo_integration (aka Matomo Integration) extension be…6.1
• CVE-2022-33157The libconnect extension before 7.0.8 and 8.x before 8.1.0 f…6.1
• CVE-2022-33158Trend Micro VPN Proxy Pro version 5.2.1026 and below contain…7.8