PT-2022-19697 · Realtek · Realtek Rtl819X-Sdk

Published 2022-07-28 · Updated 2022-08-04 · CVE-2022-29558

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Realtek rtl819x-SDK versions prior to 3.6.1

Description The issue allows command injection over the web interface. This can potentially be exploited to execute unauthorized commands on the affected system.

Recommendations For versions prior to 3.6.1, update to version 3.6.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2022-29558

Affected Products

Realtek Rtl819X-Sdk

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-29558 · Security Note
• https://realtek.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-29558 · Vendor Advisory
• https://realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-29558.pdf · Vendor Advisory
• https://t.me/cvenotify/33970 · Telegram Post