CVEvulnerability

CVE-2022-40740

7.2 HIGH Published 2023-01-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.

Affected configurations

• realtek usdk 1.0 • realtek usdk 2.0 • realtek usdk 2.2 • realtek xpon software development kit 1.9 • realtek xpon software development kit 3.3 • realtek xpon software development kit 4.0 • realtek xpon software development kit 4.1

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References