CVE-2022-38132

🗓️ 23 Aug 2022 23:16:32Reported by CybellumType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 61 Views

Command injection vuln in Linksys MR8300 router during DDNS Service Registration. Allows execution of arbitrary OS commands. Affects Linksys MR8300 Router 1.0

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-38132	23 Aug 202214:10	–	attackerkb
Circl	CVE-2022-38132	24 Aug 202207:22	–	circl
CNNVD	Linksys MR8300 操作系统命令注入漏洞	23 Aug 202200:00	–	cnnvd
CNVD	Linksys MR8300 OS Command Injection Vulnerability	24 Aug 202200:00	–	cnvd
Cvelist	CVE-2022-38132 Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands.	23 Aug 202223:16	–	cvelist
EUVD	EUVD-2022-40734	3 Oct 202520:07	–	euvd
NVD	CVE-2022-38132	24 Aug 202200:15	–	nvd
OSV	CVE-2022-38132	24 Aug 202200:15	–	osv
Prion	Command injection	24 Aug 202200:15	–	prion
Positive Technologies	PT-2022-24226 · Linksys · Linksys Mr8300 Router	23 Aug 202200:00	–	ptsecurity

NVD

Node

linksys mr8300_firmwareMatch1.0

AND

linksys mr8300Match-

[
  {
    "product": "MR8300 Router",
    "vendor": "Linksys",
    "versions": [
      {
        "status": "affected",
        "version": "Firmware 1.0"
      }
    ]
  }
]