What is CVE-2022-32967?

CVE-2022-32967 is a low-severity vulnerability in Realtek Rtl8111ep-Cg, classified under Use of Hard-coded Credentials. CVSS score: 2.1/10. Published 2022-11-29.

How severe is CVE-2022-32967?

Low severity. CVSS v3 base score is 2.1 out of 10.

Vulnerability in Realtek Rtl8111ep-Cg

CVE-2022-32967

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information.

Published 2022-11-29 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 2.1 (Low). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

EPSS exploit prediction

EPSS: 0.002 (14.2th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 14th percentile — 14.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000

Affected products

Realtek Rtl8111ep-Cg — versions unspecified, 5.0.10
Realtek Rtl8111ep-Cg Firmware — versions 5.0.10
Realtek Rtl8111fp-Cg — versions unspecified, 5.0.10
Realtek Rtl8111fp-Cg Firmware — versions 5.0.10

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

www.twcert.org.tw/tw/cp-132-6740-ba9bd-1.html (Third Party Advisory)

Frequently asked questions

What is CVE-2022-32967?: CVE-2022-32967 is a low-severity vulnerability in Realtek Rtl8111ep-Cg, classified under Use of Hard-coded Credentials. CVSS score: 2.1/10. Published 2022-11-29.
How severe is CVE-2022-32967?: Low severity. CVSS v3 base score is 2.1 out of 10.