Vulnerability Details CVE-2022-32967
RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.4%
CVSS Severity
CVSS v3 Score 2.1
References
Products affected by CVE-2022-32967
-
cpe:2.3:h:realtek:rtl8111ep-cg:-
-
cpe:2.3:h:realtek:rtl8111fp-cg:-
-
cpe:2.3:o:realtek:rtl8111ep-cg_firmware:-
-
cpe:2.3:o:realtek:rtl8111ep-cg_firmware:3.0.0.2019090
-
cpe:2.3:o:realtek:rtl8111ep-cg_firmware:5.0.10
-
cpe:2.3:o:realtek:rtl8111fp-cg_firmware:-
-
cpe:2.3:o:realtek:rtl8111fp-cg_firmware:3.0.0.2019090
-
cpe:2.3:o:realtek:rtl8111fp-cg_firmware:5.0.10