OpenCVE

Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Commscope	Arris Sbg10 Arris Sbg10 Firmware Arris Tg2482a Arris Tg2482a Firmware Arris Tg2492 Arris Tg2492 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:commscope:arris_tg2482a_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:commscope:arris_tg2482a:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:commscope:arris_tg2492_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:commscope:arris_tg2492:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:commscope:arris_sbg10_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:commscope:arris_sbg10:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://arris.com
https://packetstormsecurity.com/files/171001/Arris-Router-Firmware-9.1.103-Remote-Code-Execution.htmlhttps://github.com/yerodin/CVE-2022-45701

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-02-17T00:00:00

Updated: 2024-08-03T14:17:04.077Z

Reserved: 2022-11-21T00:00:00

Link: CVE-2022-45701

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-02-17T15:15:12.080

Modified: 2024-11-21T07:29:36.463

Link: CVE-2022-45701

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:commscope:arris_tg2482a_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "58C9C258-9589-4BF9-80E8-6D183845AF85", "versionEndIncluding": "9.1.103", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:commscope:arris_tg2482a:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0DA704D-2747-4D48-9B6A-579C461FF7AF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:commscope:arris_tg2492_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5A02B1F8-0CB4-4B30-9432-EE626C64BB3E", "versionEndIncluding": "9.1.103", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:commscope:arris_tg2492:-:*:*:*:*:*:*:*", "matchCriteriaId": "41B98AA9-BBCE-4C31-8D63-9342DC7B5FFE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:commscope:arris_sbg10_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "12019A00-8468-4260-94CD-C38AAD30FF30", "versionEndIncluding": "9.1.103", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:commscope:arris_sbg10:-:*:*:*:*:*:*:*", "matchCriteriaId": "FB95066F-1DFD-4ACA-9D18-4A5AD9155142", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature."}, {"lang": "es", "value": "El firmware Arris TG2482A hasta 9.1.103GEM9 permite la ejecuci\u00f3n remota de c\u00f3digo (RCE) a trav\u00e9s de la funci\u00f3n de utilidad ping."}], "id": "CVE-2022-45701", "lastModified": "2024-11-21T07:29:36.463", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-02-17T15:15:12.080", "references": [{"source": "cve@mitre.org", "tags": ["Product"], "url": "http://arris.com"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "https://packetstormsecurity.com/files/171001/Arris-Router-Firmware-9.1.103-Remote-Code-Execution.htmlhttps://github.com/yerodin/CVE-2022-45701"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "http://arris.com"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "https://packetstormsecurity.com/files/171001/Arris-Router-Firmware-9.1.103-Remote-Code-Execution.htmlhttps://github.com/yerodin/CVE-2022-45701"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}