Skip to content
OpenAdvisories
High · 7.2 CVE-2022-40740 EUVD-2022-44008GHSA-h56c-fjpj-2m9w

Realtek GPON router - Command Injection

Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by twcert

Description

Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.

Affected products

VendorProductAffectedFixed
Realtek GPON router SDK 1.9 —

References