CVE-2022-28377
Published Jul 14, 2022On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static account username/password for acce…
Vendor/product archive
verizon / lvskihp_outdoorunit CVEs
Beta · best-effort6 CVEs tagged to verizon / lvskihp_outdoorunit — 1 Critical, 5 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2022-28375
Published Jul 14, 2022Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled parameters within the crtcswitchsimprofile function of the crtcrpc JSON listener. A…
CVE-2022-28374
Published Jul 14, 2022Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled parameters within the DMACC URLs on the Settings page of the Engineering portal. An…
CVE-2022-28372
Published Jul 14, 2022On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints provide a means of provisioning a firmware update f…
CVE-2022-28371
Published Jul 14, 2022On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. Th…
CVE-2022-28370
Published Jul 14, 2022On Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 devices, the RPC endpoint crtc_fw_upgrade provides a means of provisioning a firmware update for the device. /lib/functions…
Showing 1-6 of 6 CVEsPage 1 of 1