CVE Daily

CVE-2022-37861

There is a remote code execution (RCE) vulnerability in Tenhot TWS-100 V4.0-2018...

Critical CVSS 9.8

Overview

There is a remote code execution (RCE) vulnerability in Tenhot TWS-100 V4.0-201809201424 router device. It is necessary to know that the device account password is allowed to escape the execution system command through the network tools in the network diagnostic component.

CWE: N/A Published: 2022-09-15T16:15:10.447
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags