6.5

CVE-2022-32966

Realtek RTL8111FP-CG - Missing Authorization

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Realtek ≫ Rtl8111fp-cg Firmware Version <= 5.0.23
   Realtek ≫ Rtl8111fp-cg Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.197
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cert TW 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://www.twcert.org.tw/tw/cp-132-6739-5098c-1.html
Third Party Advisory