CVE-2022-28377
Published Jul 14, 2022On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static account username/password for acce…
Vendor/product archive
verizon / lvskihp_indoorunit CVEs
Beta · best-effort5 CVEs tagged to verizon / lvskihp_indoorunit — 2 Critical, 3 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2022-28373
Published Jul 14, 2022Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not properly sanitize user-controlled parameters within the crtcreadpartition function of the crtcrpc JSON listener in /us…
CVE-2022-28372
Published Jul 14, 2022On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints provide a means of provisioning a firmware update f…
CVE-2022-28371
Published Jul 14, 2022On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. Th…
CVE-2022-28369
Published Jul 14, 2022Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enable_ssh sub-operation of the crtcrpc JSON listener (f…
Showing 1-5 of 5 CVEsPage 1 of 1