Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-85493
HistoryNov 30, 2022 - 12:00 a.m.

Realtek RTL8111EP-CG and RTL8168FP-CG Trust Management Issue Vulnerability

2022-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
realtek
ethernet controllers
trust management
vulnerability
firmware
hard-coded passwords
unauthenticated physical attacker
system information
default password
reboot

EPSS

0.001

Percentile

21.7%

Realtek RTL8111EP-CG and Realtek RTL8168FP-CG are both Ethernet controllers.Realtek RTL8111EP-CG, RTL8111FP-CG Firmware versions prior to 3.0.0.2019090 are vulnerable to a trust management issue, which stems from the Dash feature having hard-coded passwords, unauthenticated physical attacker could use this vulnerability to obtain some system information, such as serial numbers and server information, using a hard-coded default password when another user triggers a system reboot.

EPSS

0.001

Percentile

21.7%

Related for CNVD-2022-85493