| タイトル | ICP DAS UA‑2200 Series UA‑2200 Series Command Injection |
|---|
| 説明 | 1. Vulnerability Type
Remote Command Execution Vulnerability
2. Vulnerability Description
The UA‑2200 Series is a lineup of industrial IoT (IIoT) communication servers/gateways manufactured by Taiwan-based ICP DAS. These devices are designed for data communication, protocol conversion and cloud integration between on-site industrial OT and IT systems. A remote command execution vulnerability exists in the ArmAngstromInstructionSet function of the UA-2200. Attackers can exploit this function to execute arbitrary system commands.
3. Affected Versions
UA-2200 series
https://uvxbywu62qm.feishu.cn/wiki/SzRyw0uSnieCLDkMR8NcgcvanMd?from=from_copylink |
|---|
| ソース | ⚠️ https://uvxbywu62qm.feishu.cn/wiki/SzRyw0uSnieCLDkMR8NcgcvanMd?from=from_copylink |
|---|
| ユーザー | huliangjia (UID 99519) |
|---|
| 送信 | 2026年07月04日 12:26 (2 月 ago) |
|---|
| モデレーション | 2026年09月01日 07:26 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 397547 [ICP DAS UA-2200/UA-5200 迄 20260704 /CGI?RestApi=SetHostname ArmAngstromInstructionSet ParameterArray 特権昇格] |
|---|
| ポイント | 20 |
|---|