Lucene search

TwcertCVE-2022-32966

HistoryNov 29, 2022 - 4:15 a.m.

CVE-2022-32966

2022-11-2904:15:10

CWE-862

twcert

web.nvd.nist.gov

cve-2022-32966

rtl8168fp-cg

dash

remote management

authorization

unauthenticated attacker

adjacent network

dash service port

service disruption

nvd

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

21.7%

JSON

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service.

Affected configurations

Nvd

Node

realtekrtl8111fp-cgMatch-

AND

realtekrtl8111fp-cg_firmwareRange≤5.0.23

VendorProductVersionCPE
realtekrtl8111fp-cg-cpe:2.3:h:realtek:rtl8111fp-cg:-:*:*:*:*:*:*:*
realtekrtl8111fp-cg_firmware*cpe:2.3:o:realtek:rtl8111fp-cg_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realtek	rtl8111fp-cg	-	cpe:2.3:h:realtek:rtl8111fp-cg:-:::::::*
realtek	rtl8111fp-cg_firmware	*	cpe:2.3:o:realtek:rtl8111fp-cg_firmware::::::::

CNA Affected

[
  {
    "vendor": "Realtek",
    "product": "RTL8111FP-CG",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "5.0.23",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

www.twcert.org.tw/tw/cp-132-6739-5098c-1.html

Social References

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

21.7%

JSON

Related for CVE-2022-32966