CVE-2022-23768 Neo Information Sys. NIS-HAP11AC remote access and manipulation vulnerability
Remote attackers can exploit an exposed telnet port to hijack source code and remotely control the home access point.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-23768?
CVE-2022-23768 is a high-severity vulnerability in Neo Information Systems Co., Ltd Home AP NIS-HAP11AC, published on 19 Sep 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use this vulnerability to induce all attacks such as source code hijacking, remote control of the device.
Weakness: CWE-284
Which versions are affected by CVE-2022-23768?
It affects 1 product.
Products include Neoinfosys Nis-Hap11ac Firmware.
How do I fix CVE-2022-23768?
No fix has been published for CVE-2022-23768 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-23768 being exploited?
There is no known exploitation of CVE-2022-23768 in the wild and no public exploit code.
Sources
Also known as GHSA-cvgx-ch95-q7h5.