1. Home
  2. CVE Database
  3. CVE-2022-40740
HIGH · 7.2

CVE-2022-40740

Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execu...

Vulnerability Description

Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
RealtekUsdk1.0
RealtekXpon Software Development Kit1.9

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2022-40740?

CVE-2022-40740 is a vulnerability with a CVSS score of 7.2 (HIGH). Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execu...

How severe is CVE-2022-40740?

CVE-2022-40740 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-40740?

Check the references section above for vendor advisories and patch information. Affected products include: Realtek Usdk, Realtek Xpon Software Development Kit.