Vulnerability Details CVE-2022-33948
HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.5%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 8.3
References
Products affected by CVE-2022-33948
-
cpe:2.3:h:kddi:home_spot_cube_2:-
-
cpe:2.3:o:kddi:home_spot_cube_2_firmware:v100
-
cpe:2.3:o:kddi:home_spot_cube_2_firmware:v101
-
cpe:2.3:o:kddi:home_spot_cube_2_firmware:v102