CVE-2022-28373

The CVE-2022-28373 entry concerns Verizon 5G Home LVSKIHP InDoorUnit (IDU) version 3.4.66.162. The vulnerability exists in the crtcreadpartition function of the crtcrpc JSON listener located at /usr/lib/lua/luci/crtc.lua, where user-controlled parameters are not properly sanitized. A remote attac...