References https://avd.aliyun.com/detail?id=AVD-2022-1660 https://zone.ci/aliyun/ali_nvd/70558.html https://nvd.nist.gov/vuln/detail/CVE-2022-1661 https://www.cve.org/CVERecord?id=CVE-2022-1661 https://www.zerodayinitiative.com/advisories/ZDI-22-805/ https://github.com/advisories/GHSA-4f3p-5vq4-2r5c https://nvd.nist.gov/vuln/detail/CVE-2022-38129 https://www.tenable.com/security/research/tra-2022-28 https://access.redhat.com/security/cve/cve-2022-38129 https://www.cisa.gov/news-events/ics-advisories/icsa-22-146-01
Related VulnerabilitiesPoCCVE-2022-38130: KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code ExecutionKeySight N6854A和N6841A RF传感器不安全的反序列化漏洞KeySight N6854A 和 N6841A RF 传感器 smsRestoreDatabaseZip SQL注入漏洞KeySight N6854A and N6841A RF Sensor UserFirmwareRequestHandler目录遍历漏洞