CVE-2022-48616 MEDIUM

CVE-2022-48616

Vendor Huawei

Product AR6000

Weakness CWE-78

Published December 12, 2023

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

6.4/10

Attack vector Adjacent

Attack complexity High

Privileges required High

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges.

Key dates

02Disclosure timeline

December 12, 2023 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-48616 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/78.html

Related vulnerabilities

Identifiers

CVE CVE-2022-48616

CWE CWE-78

CVSS 6.4 / MEDIUM

Affected versions

Vendor Huawei

Product AR6000

Affected AR6000 V300R019C10SPC300

Vendor Huawei

Product AR6000

Affected AR6000 V300R019C13SPC200

Vendor Huawei

Product AR6000

Affected AR6000 V300R021C00SPC200

Vendor Huawei

Product AR6000

Affected AR6000 V300R021C10SPC100

CVE-2022-48616

01Description

02Disclosure timeline

03References

04Related CVE