« Volver al listado

CVE-2022-38531

Estado: ModificadaAlta (8.8)—

FPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in the ping function.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

FPT — G-97rg3 FirmwareFPT — G-97rg6m Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-38531",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-09-08T00:15:10.277",
  "references": [
    {
      "url": "https://github.com/SLoSnow9879/FPT-Router-RCE",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/SLoSnow9879/FPT-Router-RCE",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "FPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in the ping function."
    },
    {
      "lang": "es",
      "value": "FPT G-97RG6M versiones R4.2.98.035 y G-97RG3 R4.2.43.078, son vulnerables a una ejecución de comandos remota en la función ping"
    }
  ],
  "lastModified": "2026-06-17T04:56:47.300",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fpt:g-97rg6m_firmware:r4.2.98.035:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99E0206A-81AE-47F2-BA4C-5CE9221286E0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:fpt:g-97rg6m:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "179B317B-F86E-4908-ACFD-9E137FB755D6"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fpt:g-97rg3_firmware:r4.2.43.078:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3238C38B-3C02-43B9-B76A-CBCC766681F0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:fpt:g-97rg3:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "83F0A92A-C3BF-4839-A6B9-33270EF7836C"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}