Paper/Archive/CVE-2022-23768

CVE-2022-23768

Neo Information Systems Co., Ltd Home AP NIS-HAP11AC — Neo Information Sys. NIS-HAP11AC remote access and manipulation vulnerability

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 63.3.633 × 2012.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use this vulnerability to induce all attacks such as source code hijacking, remote control of the device.

Affected

ProductAffectedFixed inSource

Home AP NIS-HAP11ACV3.0-B20201117095902–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

krcert (CNA)8.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refkrcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66928