CVE-2022-28372

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints provide a means of provisioning a firmware update for the device via crtcfwupgrade or crtcfwimage. The URL provided is not validated, and thus allows for arbitrary file uplo...

CVE-2022-28369: Unrestricted Upload of File with Dangerous Type

Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enablessh sub-operation of the crtcrpc JSON listener found at /lib/functions/wncjsonsh/crtcmode.sh A remote attacker on the local network can provide a malicious URL. The data...

PT-2022-18982

Name of the Vulnerable Software and Affected Versions Verizon 5G Home LVSKIHP InDoorUnit IDU version 3.4.66.162 Description The issue arises from improper sanitization of user-controlled parameters within the crtcreadpartition function of the crtcrpc JSON listener in /usr/lib/lua/luci/crtc.lua...

CVE-2022-28373: Improper Neutralization of Special Elements used in an OS Command

Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 does not properly sanitize user-controlled parameters within the crtcreadpartition function of the crtcrpc JSON listener in /usr/lib/lua/luci/crtc.lua. A remote attacker on the local network can inject shell metacharacters to achieve remote code...

PT-2022-18978

Name of the Vulnerable Software and Affected Versions Verizon 5G Home LVSKIHP InDoorUnit IDU version 3.4.66.162 Description The issue concerns the failure to validate user-provided URLs within the crtcmode function's enable ssh sub-operation of the crtcrpc JSON listener, located at...