Lucene search

MitreCVE-2022-45768

HistoryFeb 07, 2023 - 9:15 p.m.

CVE-2022-45768

2023-02-0721:15:09

CWE-78

mitre

web.nvd.nist.gov

cve-2022-45768

command injection

edimax

wireless router

n300

firmware

br428ns

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

49.0%

JSON

Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitrary code via the formWlanMP function.

Affected configurations

Nvd

Node

edimaxbr-6428nsMatchv3

AND

edimaxbr-6428ns_firmwareMatch1.20

VendorProductVersionCPE
edimaxbr-6428nsv3cpe:2.3:h:edimax:br-6428ns:v3:*:*:*:*:*:*:*
edimaxbr-6428ns_firmware1.20cpe:2.3:o:edimax:br-6428ns_firmware:1.20:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
edimax	br-6428ns	v3	cpe:2.3:h:edimax:br-6428ns:v3:::::::*
edimax	br-6428ns_firmware	1.20	cpe:2.3:o:edimax:br-6428ns_firmware:1.20:::::::*

References

github.com/Erebua/CVE/blob/main/Edimax.md

www.lovesandy.cc/2022/11/20/EDIMAX%E6%BC%8F%E6%B4%9E/

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

49.0%

JSON

Related for CVE-2022-45768