PT-2022-18979 · Verizon · Verizon 5G Home Lvskihp Outdoorunit

Published 2022-07-14 · Updated 2023-08-08 · CVE-2022-28370

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Verizon 5G Home LVSKIHP OutDoorUnit (ODU) version 3.33.101.0

Description The issue affects the RPC endpoint "crtc fw upgrade" which is used for provisioning firmware updates. The script /lib/functions/wnc jsonsh/wnc crtc fw.sh lacks cryptographic validation of the image, allowing an attacker to modify the installed firmware. This could potentially lead to unauthorized changes to the device's firmware.

Recommendations For version 3.33.101.0, as a temporary workaround, consider disabling the "crtc fw upgrade" RPC endpoint until a patch is available. Restrict access to the /lib/functions/wnc jsonsh/wnc crtc fw.sh script to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2022-28370

Affected Products

Verizon 5G Home Lvskihp Outdoorunit

References · 6

• 🔥 https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md · Exploit
• https://verizon.com/info/reportsecurityvulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28370 · Security Note
• https://osv.dev/vulnerability/CVE-2022-28370 · Vendor Advisory
• https://t.me/cibsecurity/46231 · Telegram Post
• https://t.me/cvenotify/33068 · Telegram Post