CVE-2022-37661

2022-09-1413:15:11

[email protected]

web.nvd.nist.gov

smartrg sr506n

sr510n

rce

remote code execution

ping host feature

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.658

Percentile

98.0%

JSON

SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

Affected configurations

Nvd

Node

adtransr510n_firmwareMatch2.6.13

AND

adtransr510nMatch-

Node

adtransr506n_firmwareMatch2.5.15

AND

adtransr506nMatch-

VendorProductVersionCPE
adtransr510n_firmware2.6.13cpe:2.3:o:adtran:sr510n_firmware:2.6.13:*:*:*:*:*:*:*
adtransr510n-cpe:2.3:h:adtran:sr510n:-:*:*:*:*:*:*:*
adtransr506n_firmware2.5.15cpe:2.3:o:adtran:sr506n_firmware:2.5.15:*:*:*:*:*:*:*
adtransr506n-cpe:2.3:h:adtran:sr506n:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adtran	sr510n_firmware	2.6.13	cpe:2.3:o:adtran:sr510n_firmware:2.6.13:::::::*
adtran	sr510n	-	cpe:2.3:h:adtran:sr510n:-:::::::*
adtran	sr506n_firmware	2.5.15	cpe:2.3:o:adtran:sr506n_firmware:2.5.15:::::::*
adtran	sr506n	-	cpe:2.3:h:adtran:sr506n:-:::::::*