What is the vulnerability ID of this security issue?

The vulnerability ID is CVE-2022-32966.

What is the title of this vulnerability?

The title of this vulnerability is 'RTL8168FP-CG Dash remote management function has missing authorization.'

What is the severity level of CVE-2022-32966?

The severity level of CVE-2022-32966 is medium with a score of 6.5.

How does the vulnerability affect Realtek RTL8111FP-CG firmware?

The vulnerability affects Realtek RTL8111FP-CG firmware version up to and including 5.0.23.

Is Realtek RTL8111FP-CG hardware affected by this vulnerability?

No, Realtek RTL8111FP-CG hardware is not vulnerable to this issue.

What is the potential impact of this vulnerability?

An unauthenticated attacker within the adjacent network can connect to the DASH service port to disrupt service.

Where can I find more information about CVE-2022-32966?

You can find more information about CVE-2022-32966 at the following link: https://www.twcert.org.tw/tw/cp-132-6739-5098c-1.html

What is the CWE category associated with this vulnerability?

The CWE category associated with this vulnerability is CWE-862.

Vulnerability/
CVE-2022-32966

medium

6.5

CWE

862

29/11/2022

17/9/2024

CVE-2022-32966: Realtek RTL8111FP-CG - Missing Authorization

First published: Tue Nov 29 2022(Updated: )

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service.

Credit: twcert@cert.org.tw

Affected Software	Affected Version	How to fix
Realtek Rtl8111fp-cg Firmware	<=5.0.23
Realtek Rtl8111fp-cg

Remedy

Contact tech support from Realtek

Never miss a vulnerability like this again

Reference Links

https://www.twcert.org.tw/tw/cp-132-6739-5098c-1.html

Frequently Asked Questions

What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2022-32966.
What is the title of this vulnerability?
The title of this vulnerability is 'RTL8168FP-CG Dash remote management function has missing authorization.'
What is the severity level of CVE-2022-32966?
The severity level of CVE-2022-32966 is medium with a score of 6.5.
How does the vulnerability affect Realtek RTL8111FP-CG firmware?
The vulnerability affects Realtek RTL8111FP-CG firmware version up to and including 5.0.23.
Is Realtek RTL8111FP-CG hardware affected by this vulnerability?
No, Realtek RTL8111FP-CG hardware is not vulnerable to this issue.
What is the potential impact of this vulnerability?
An unauthenticated attacker within the adjacent network can connect to the DASH service port to disrupt service.
Where can I find more information about CVE-2022-32966?
You can find more information about CVE-2022-32966 at the following link: https://www.twcert.org.tw/tw/cp-132-6739-5098c-1.html
What is the CWE category associated with this vulnerability?
The CWE category associated with this vulnerability is CWE-862.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/title
agent/weakness
agent/references
agent/severity
agent/remedy
agent/author
agent/last-modified-date
agent/description
agent/tags
agent/first-publish-date
agent/event
vendor/realtek
canonical/realtek rtl8111fp-cg firmware
version/realtek rtl8111fp-cg firmware/5.0.23
canonical/realtek rtl8111fp-cg

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.