PT-2023-1630 · Arris · Arris Tg2482A+2

Published 2023-02-15 · Updated 2025-03-18 · CVE-2022-45701

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Arris TG2482A versions 9.1.103GEM9 and earlier Arris TG2492 (affected versions not specified) Arris SBG10 (affected versions not specified)

Description The issue is related to errors in processing input data in the firmware of Arris routers. Exploitation of this issue may allow a remote attacker to execute arbitrary code by sending a specially crafted request. The vulnerability can be exploited via the ping utility feature.

Recommendations For Arris TG2482A versions 9.1.103GEM9 and earlier, update the firmware to a version that contains a fix for this issue. For Arris TG2492 and Arris SBG10, at the moment, there is no information about a newer version that contains a fix for this issue. As a temporary workaround, consider disabling the ping utility feature until a patch is available.

Exploit

Fix

RCE

Command Injection

Weakness Enumeration

CWE-77

CWE-20

Related Identifiers

BDU:2023-01144

CVE-2022-45701

Affected Products

Arris Sbg10

Arris Tg2482A

Arris Tg2492

References · 14

• 🔥 https://github.com/geniuszlyy/CVE-2022-45701 · Exploit
• 🔥 https://github.com/geniuszly/CVE-2022-45701 · Exploit
• 🔥 https://github.com/yerodin/CVE-2022-45701 · Exploit
• 🔥 https://packetstormsecurity.com/files/171001/Arris-Router-Firmware-9.1.103-Remote-Code-Execution.htmlhttps://github.com/yerodin/CVE-2022-45701 · Exploit
• 🔥 https://exploit-db.com/exploits/51269 · Exploit
• https://bdu.fstec.ru/vul/2023-01144 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45701 · Security Note
• https://packetstormsecurity.com/files/171001 · Note
• https://t.me/defcon_news/110097 · Telegram Post
• https://t.me/cibsecurity/58438 · Telegram Post
• https://t.me/cvenotify/115173 · Telegram Post
• https://packetstormsecurity.com/files/171001/Arris-Router-Firmware-9.1.103-Remote-Code-Execution.html · Note
• http://arris.com · Note