CVE-2022-37861

There is a remote code execution (RCE) vulnerability in Tenhot TWS-100 V4.0-201809201424 router device. It is necessary to know that the device account password is allowed to escape the execution system command through the network tools in the network diagnostic component.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://www.tenhot.net/html/pro/wgzly/111704.html	Vendor Advisory
https://gist.github.com/ox01024/784894c27213c5a765b5c8f8375db256	Exploit Third Party Advisory
http://www.tenhot.net/html/pro/wgzly/111704.html	Vendor Advisory
https://gist.github.com/ox01024/784894c27213c5a765b5c8f8375db256	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:tenhot:tws-100_firmware:4.0-201809201424:*:*:*:*:*:*:*

cpe:2.3:h:tenhot:tws-100:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:15

Type	Values Removed	Values Added
References	~~() http://www.tenhot.net/html/pro/wgzly/111704.html - Vendor Advisory~~	() http://www.tenhot.net/html/pro/wgzly/111704.html - Vendor Advisory
References	~~() https://gist.github.com/ox01024/784894c27213c5a765b5c8f8375db256 - Exploit, Third Party Advisory~~	() https://gist.github.com/ox01024/784894c27213c5a765b5c8f8375db256 - Exploit, Third Party Advisory

Information

Published : 2022-09-15 16:15

Updated : 2024-11-21 07:15

NVD link : CVE-2022-37861

Mitre link : CVE-2022-37861

CVE.ORG link : CVE-2022-37861

JSON object : View

Products Affected

tenhot

tws-100_firmware
tws-100

CWE

NVD-CWE-noinfo

{"id": "CVE-2022-37861", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-09-15T16:15:10.447", "references": [{"url": "http://www.tenhot.net/html/pro/wgzly/111704.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://gist.github.com/ox01024/784894c27213c5a765b5c8f8375db256", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.tenhot.net/html/pro/wgzly/111704.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://gist.github.com/ox01024/784894c27213c5a765b5c8f8375db256", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "There is a remote code execution (RCE) vulnerability in Tenhot TWS-100 V4.0-201809201424 router device. It is necessary to know that the device account password is allowed to escape the execution system command through the network tools in the network diagnostic component."}, {"lang": "es", "value": "Existe una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo (RCE) en el dispositivo router Tenhot TWS-100 V4.0-201809201424. Es necesario saber que la contrase\u00f1a de la cuenta del dispositivo se permite escapar del comando del sistema de ejecuci\u00f3n a trav\u00e9s de las herramientas de red en el componente de diagn\u00f3stico de la red"}], "lastModified": "2024-11-21T07:15:17.010", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenhot:tws-100_firmware:4.0-201809201424:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF8DE8F7-B1B8-465E-BF5C-0153B85CA8D8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenhot:tws-100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0174C4B9-F4E7-44DF-85D9-B9D8FB5E9B30"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}