PT-2022-24037 · Smartrg · Smartrg Sr510N+1

Yerodin Richards · Published 2022-09-14 · Updated 2023-01-20 · CVE-2022-37661

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SmartRG SR506n version 2.5.15 SmartRG SR510n version 2.6.13

Description The issue allows for Remote Code Execution (RCE) via the ping host feature.

Recommendations For SmartRG SR506n version 2.5.15, consider disabling the ping host feature until a patch is available. For SmartRG SR510n version 2.6.13, consider disabling the ping host feature until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-37661

Affected Products

Smartrg Sr506N

Smartrg Sr510N

References · 10

• 🔥 https://exploit-db.com/exploits/51031 · Exploit
• 🔥 http://packetstormsecurity.com/files/168336/SmartRG-Router-2.6.13-Remote-Code-Execution.html · Exploit
• 🔥 http://packetstormsecurity.com/files/169816/SmartRG-Router-SR510n-2.6.13-Remote-Code-Execution.html · Exploit
• 🔥 https://cxsecurity.com/issue/WLB-2022090029 · Exploit
• https://osv.dev/vulnerability/CVE-2022-37661 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37661 · Security Note
• https://t.me/cibsecurity/49774 · Telegram Post
• https://t.me/cvenotify/42495 · Telegram Post
• https://t.me/cvenotify/36139 · Telegram Post
• https://packetstormsecurity.com/files/cve/CVE-2022-37661 · Note