CSRF in Irz Rl01
CVE-2022-27226
A CSRF issue in /api/crontab on iRZ Mobile Routers through 2022-03-16 allows a threat actor to create a crontab entry in the router administration panel. The cronjob will consequently execute the entry on the threat actor's defined interval, leading to remote code execution, allowing the threat actor to gain filesystem access. In addition, if the router's default credentials aren't rotated or a threat actor discovers valid credentials, remote code execution can be achieved without user interaction.
Vulnerability class: CSRF (Cross-Site Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.337 (98.3th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.337 · newest: 0.337 · change: 0.000
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- en.irz.ru (Product)
- johnjhacking.com/blog/cve-2022-27226/ (Exploit, Third Party Advisory)
- github.com/SakuraSamuraii/ez-iRZ (Exploit, Third Party Advisory)
- packetstormsecurity.com/files/166396/iRZ-Mobile-Router-Cross-Site-Request-Forge… (Exploit, VDB Entry, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-27226?
- CVE-2022-27226 is a high-severity vulnerability in Irz Rl01, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2022-03-19.
- How severe is CVE-2022-27226?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2022-27226 known to be exploited?
- 16 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.