Lucene search

K
cvelistMitreCVELIST:CVE-2022-26992
HistoryMar 15, 2022 - 9:56 p.m.

CVE-2022-26992

2022-03-1521:56:26
mitre
www.cve.org
2
arris routers
command injection
vulnerability
ddns function

EPSS

0.002

Percentile

52.4%

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ddns function via the DdnsUserName, DdnsHostName, and DdnsPassword parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

EPSS

0.002

Percentile

52.4%