What is CVE-2022-23768?

CVE-2022-23768 is a high-severity vulnerability in Neo Information Systems Co., Ltd Home Ap Nis-Hap11ac, classified under Improper Access Control. CVSS score: 8.8/10. Published 2022-09-19.

How severe is CVE-2022-23768?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Neo Information Systems Co., Ltd Home Ap Nis-Hap11ac

CVE-2022-23768

This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use this vulnerability to induce all attacks such as source code hijacking, remote control of the device.

EPSS: 0.009 (56.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Neo Information Systems Co., Ltd Home Ap Nis-hap11ac — versions V3.0-B20201117095902
Neoinfosys Nis-hap11ac
Neoinfosys Nis-hap11ac_firmware — versions 3.0

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

vuln@krcert.or.kr (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-23768?: CVE-2022-23768 is a high-severity vulnerability in Neo Information Systems Co., Ltd Home Ap Nis-Hap11ac, classified under Improper Access Control. CVSS score: 8.8/10. Published 2022-09-19.
How severe is CVE-2022-23768?: High severity. CVSS v3 base score is 8.8 out of 10.