Vulnerability Description
On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is embedded in the firmware, and is identical across the fleet of devices. An attacker need only download this firmware and extract the private components of these certificates (from /etc/lighttpd.d/ca.pem and /etc/lighttpd.d/server.pem) to gain access. (The firmware download location is shown in a device's upgrade logs.)
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Verizon | Lvskihp Indoorunit Firmware | 3.4.66.162 |
| Verizon | Lvskihp Indoorunit | - |
| Verizon | Lvskihp Outdoorunit Firmware | 3.33.101.0 |
| Verizon | Lvskihp Outdoorunit | - |
Related Weaknesses (CWE)
References
- https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20ModemExploitThird Party Advisory
- https://www.verizon.com/info/reportsecurityvulnerability/Vendor Advisory
- https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20ModemExploitThird Party Advisory
- https://www.verizon.com/info/reportsecurityvulnerability/Vendor Advisory
FAQ
What is CVE-2022-28371?
CVE-2022-28371 is a vulnerability with a CVSS score of 7.5 (HIGH). On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is emb...
How severe is CVE-2022-28371?
CVE-2022-28371 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-28371?
Check the references section above for vendor advisories and patch information. Affected products include: Verizon Lvskihp Indoorunit Firmware, Verizon Lvskihp Indoorunit, Verizon Lvskihp Outdoorunit Firmware, Verizon Lvskihp Outdoorunit.