high7.2
CVE-2022-40740
Realtek GPON router has insufficient filtering for special characters.
Impact
Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realtek | Usdk | Versions 1.0, 2.0, 2.2 |
| Realtek | Xpon Software Development Kit | Versions 1.9, 3.3, 4.0, 4.1 |