CVE-2022-28369: Malicious File Upload
Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enablessh sub-operation of the crtcrpc JSON listener (found at /lib/functions/wncjsonsh/crtcmode.sh) A remote attacker on the local network can provide a malicious URL. The data (found at that URL) is written to /usr/sbin/dropbear and then executed as root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-28369?
CVE-2022-28369 is considered a high severity vulnerability due to the potential for remote exploitation on the local network.
How do I fix CVE-2022-28369?
To fix CVE-2022-28369, update the Verizon 5G Home InDoorUnit firmware to a version that mitigates this vulnerability.
What systems are affected by CVE-2022-28369?
CVE-2022-28369 affects the Verizon 5G Home LVSKIHP InDoorUnit firmware version 3.4.66.162.
What type of attack can exploit CVE-2022-28369?
CVE-2022-28369 can be exploited by a remote attacker who can provide a crafted URL to the vulnerable JSON listener.
Is there a way to identify if CVE-2022-28369 has been exploited?
Evidence of exploitation of CVE-2022-28369 may be indicated by unusual network traffic patterns or unauthorized access attempts to the device.