Lucene search
PRIOn knowledge basePRION:CVE-2022-26990HistoryMar 15, 2022 - 10:15 p.m.
Command injection
2022-03-1522:15:00
PRIOn knowledge base
www.prio-n.com
1
0.002 Low
EPSS
Percentile
59.0%
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the firewall-local log function via the EmailAddress, SmtpServerName, SmtpUsername, and SmtpPassword parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sbr-ac1200p_firmware | eq | 1.0.5-b05 | |
| sbr-ac1900p_firmware | eq | 1.0.7-b05 | |
| sbr-ac3200p_firmware | eq | 1.0.7-b05 |
Related
cvelist
cvelist
CVE-2022-26990
2022-03-15 21:56:25
cve
cve
CVE-2022-26990
2022-03-15 22:15:14
nvd
nvd
CVE-2022-26990
2022-03-15 22:15:14
cnvd
cnvd
Multiple ARRIS Product Command Injection Vulnerabilities (CNVD-2022-68531)
2022-03-17 00:00:00
checkpoint_advisories
checkpoint_advisories