CVE-2022-47208

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attacker on the same network segment as the router can execute arbitrary commands on the device without authentication.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Dec 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-472098.8A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is “supp CVE-2022-47215.4Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5 CVE-2022-472107.8The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, ho CVE-2022-472117.8Microsoft Office Graphics Remote Code Execution Vulnerability CVE-2022-472127.8Microsoft Office Graphics Remote Code Execution Vulnerability CVE-2022-472137.8Microsoft Office Graphics Remote Code Execution Vulnerability CVE-2022-47227.2Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.CVE-2022-47236.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.CVE-2022-47249.8Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.CVE-2022-47259.8A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-andro CVE-2022-47269.8A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an CVE-2022-47276.1A vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. This affects the func