« Volver al listado

CVE-2022-48616

Estado: ModificadaAlta (7.5)—

A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Huawei — Ar617vw Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-48616",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@huawei.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.4,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.5
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@huawei.com",
      "affectedData": [
        {
          "vendor": "Huawei",
          "product": "AR6000",
          "versions": [
            {
              "status": "affected",
              "version": "AR6000 V300R019C10SPC300"
            },
            {
              "status": "affected",
              "version": "AR6000 V300R019C13SPC200"
            },
            {
              "status": "affected",
              "version": "AR6000 V300R021C00SPC200"
            },
            {
              "status": "affected",
              "version": "AR6000 V300R021C10SPC100"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-12-12T08:15:07.377",
  "references": [
    {
      "url": "https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "psirt@huawei.com"
    },
    {
      "url": "https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@huawei.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges."
    },
    {
      "lang": "es",
      "value": "Un producto de comunicación de datos de Huawei tiene una vulnerabilidad de inyección de comandos. La explotación exitosa de esta vulnerabilidad puede permitir a los atacantes obtener mayores privilegios."
    }
  ],
  "lastModified": "2026-06-17T05:15:43.263",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:ar617vw_firmware:v300r21c00spc200:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DE4F691-FB18-4844-89A3-D8618650CC8E"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:ar617vw:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B5DE91A7-9567-4086-90FC-E13214E61FA6"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@huawei.com"
}