CVE-2022-29558

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-29558
Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.realtek.com Vendor Advisory
https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-29558.pdf Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:realtek:rtl819x_software_development_kit:*:*:*:*:*:*:*:*
History

04 Aug 2022, 17:28

Type Values Removed Values Added
CWE CWE-77
CPE cpe:2.3:a:realtek:rtl819x_software_development_kit:*:*:*:*:*:*:*:*
First Time Realtek rtl819x Software Development Kit
Realtek
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
References (MISC) https://www.realtek.com - (MISC) https://www.realtek.com - Vendor Advisory
References (MISC) https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-29558.pdf - (MISC) https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-29558.pdf - Vendor Advisory

28 Jul 2022, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-07-28 22:15

Updated : 2023-12-10 14:35

NVD link : CVE-2022-29558

Mitre link : CVE-2022-29558

CVE.ORG link : CVE-2022-29558

JSON object : View

Products Affected

realtek

  • rtl819x_software_development_kit
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')