CVE-2022-32966

2022-11-2904:15:10

CWE-862

[email protected]

web.nvd.nist.gov

rtl8168fp-cg

dash service

authorization vulnerability

adjacent network

disrupt service

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

21.7%

JSON

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service.

Affected configurations

Nvd

Node

realtekrtl8111fp-cgMatch-

AND

realtekrtl8111fp-cg_firmwareRange≤5.0.23

VendorProductVersionCPE
realtekrtl8111fp-cg-cpe:2.3:h:realtek:rtl8111fp-cg:-:*:*:*:*:*:*:*
realtekrtl8111fp-cg_firmware*cpe:2.3:o:realtek:rtl8111fp-cg_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realtek	rtl8111fp-cg	-	cpe:2.3:h:realtek:rtl8111fp-cg:-:::::::*
realtek	rtl8111fp-cg_firmware	*	cpe:2.3:o:realtek:rtl8111fp-cg_firmware::::::::