CVEvulnerability

CVE-2022-32967

2.1 LOW Published 2022-11-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.1 LOW — CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weaknesses
CWE-798

Description

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information.

Affected configurations

• realtek rtl8111ep-cg firmware (<= 3.0.0.2019090) • realtek rtl8111ep-cg firmware 5.0.10 • realtek rtl8111fp-cg firmware (<= 3.0.0.2019090) • realtek rtl8111fp-cg firmware 5.0.10

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References