CVE-2022-36200

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-319

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Aug 29, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-362019.8Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php.CVE-2022-362029.8Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by BrokCVE-2022-362036.1Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. In addition, it leads to takeover the adminCVE-2022-36216.5A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of theCVE-2022-362157.2DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.CVE-2022-362167.2DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in member_toadmin.php.CVE-2022-36224.1The Blog2Social plugin for WordPress is vulnerable to authorization bypass due to missing capability checks in versions up to, and includinCVE-2022-362209.8Kiosk breakout (without quit password) in Safe Exam Browser (Windows) <3.4.0, which allows an attacker to achieve code execution via the broCVE-2022-362216.5Nokia Fastmile 3tg00118abad52 is affected by an authenticated path traversal vulnerability which allows attackers to read any named pipe filCVE-2022-362228.4Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5st7o This account caCVE-2022-362236.1In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administrator access token andCVE-2022-362248.8XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF).
CVE-2022-36200: High severity, CVSS 7.5 | Vulnix