Lucene search

TwcertCVELIST:CVE-2022-32966

HistoryNov 29, 2022 - 3:30 a.m.

CVE-2022-32966 Realtek RTL8111FP-CG - Missing Authorization

2022-11-2903:30:26

CWE-862

twcert

www.cve.org

realtek

rtl8111fp-cg

missing authorization

dash service port

remote management

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

21.7%

JSON

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service.

CNA Affected

[
  {
    "vendor": "Realtek",
    "product": "RTL8111FP-CG",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "5.0.23",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

www.twcert.org.tw/tw/cp-132-6739-5098c-1.html

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

21.7%

JSON

Related for CVELIST:CVE-2022-32966