CVE-2022-32967 LOW

CVE-2022-32967: Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials

Vendor Realtek
Product RTL8111EP-CG
Weakness CWE-798 · Hardcoded credentials
Published November 29, 2022
Last update April 23, 2025
View on NVD All CVEs

CVSS base score

2.1/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information.

Key dates

02Disclosure timeline

November 29, 2022 CVE published
April 23, 2025 Record updated