What is CVE-2022-32967?

CVE-2022-32967 is a low-severity vulnerability in Realtek Rtl8111ep-Cg, classified under Use of Hard-coded Credentials. CVSS score: 2.1/10. Published 2022-11-29.

How severe is CVE-2022-32967?

Low severity. CVSS v3 base score is 2.1 out of 10.

Vulnerability in Realtek Rtl8111ep-Cg

CVE-2022-32967

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information.

EPSS: 0.002 (15.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.1 (Low). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Realtek Rtl8111ep-cg — versions unspecified, 5.0.10
Realtek Rtl8111ep-cg_firmware — versions 5.0.10
Realtek Rtl8111fp-cg — versions unspecified, 5.0.10
Realtek Rtl8111fp-cg_firmware — versions 5.0.10

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

twcert@cert.org.tw (Third Party Advisory)

Frequently asked questions

What is CVE-2022-32967?: CVE-2022-32967 is a low-severity vulnerability in Realtek Rtl8111ep-Cg, classified under Use of Hard-coded Credentials. CVSS score: 2.1/10. Published 2022-11-29.
How severe is CVE-2022-32967?: Low severity. CVSS v3 base score is 2.1 out of 10.