CVE-2022-24915

CVE-2022-24915 is a high-severity code injection vulnerability affecting ipcomm ipdio and ipcomm ipdio_firmware. It allows unauthenticated attackers to inject malicious code into specific web application parameters due to a lack of input filtering. This code executes when a legitimate user performs administrative actions like uploading or deleting configurations, leading to high impact on confidentiality, integrity, and availability. While the CVSS score is 8.8, there is currently no public exploit code, Metasploit modules, or evidence of active exploitation, and it has received minimal community discussion or media coverage.