← Database

CVE-2022-28223

CRITICAL CVSS: 9.1 Published: 2022-03-30 Modified: 2026-06-17

Description

Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin.

Affected Platforms

Tekon KioTekon Kio-2Md FirmwareTekon Kio-8\(4\)LTekon Kio-2M FirmwareTekon Kio-2MrsTekon Kio-2MsTekon Kio-1MTekon Kio-2Ms FirmwareTekon Kio-2MdTekon Kio-8\(4\) Firmware

Weakness Type

CWE-434

References