title: PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection
description: PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301
problem types: Unauthenticated OS Command Injection
affected:
{
product: PROSCEND M330-w / M330-W5
vendor: PROSCEND
versions:
lessThan: V1.11*, status: affected, version: V1.11, versionType: custom
}
{
product: PROSCEND M350-5G / M350-W5G / M350-6 / M350-W6
vendor: PROSCEND
versions:
lessThan: V1.02*, status: affected, version: V1.02, versionType: custom
}
{
product: PROSCEND M301-G / M301-GW
vendor: PROSCEND
versions:
lessThan: V2.20*, status: affected, version: V2.20, versionType: custom
}
{
product: ADVICE ICR 111WG
vendor: PROSCEND
versions:
lessThan: V1.11*, status: affected, version: V1.11, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
version: 3.1
]
solutions: Update released for the following versions:
Proscend M330-w / M330-W5 Plan to fix on V1.11
Proscend M350-5G / M350-W5G / M350-6 / M350-W6 Fixed on V1.02
Proscend M301-G / M301-GW Fixed on V2.20
ADVICE ICR 111WG / Plan to fix on V1.11