CVE-2022-37661 : SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Ex

SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

Published 2022-09-14 13:15:12

Updated 2023-01-20 03:16:31

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2022-37661

Adtran » Sr510n Firmware » Version: 2.6.13
cpe:2.3:o:adtran:sr510n_firmware:2.6.13:*:*:*:*:*:*:*
Matching versions
When used together with: Adtran » Sr510n » Version: N/A
Adtran » Sr506n Firmware » Version: 2.5.15
cpe:2.3:o:adtran:sr506n_firmware:2.5.15:*:*:*:*:*:*:*
Matching versions
When used together with: Adtran » Sr506n » Version: N/A

EPSS FAQ

64.38%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

https://packetstormsecurity.com/files/cve/CVE-2022-37661

CVE-2022-37661 ≈ Packet Storm
Third Party Advisory;VDB Entry
http://packetstormsecurity.com/files/169816/SmartRG-Router-SR510n-2.6.13-Remote-Code-Execution.html

SmartRG Router SR510n 2.6.13 Remote Code Execution ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry
https://cxsecurity.com/issue/WLB-2022090029

SmartRG Router 2.6.13 Remote Code Execution - CXSecurity.com
Exploit;Third Party Advisory
http://packetstormsecurity.com/files/168336/SmartRG-Router-2.6.13-Remote-Code-Execution.html

SmartRG Router 2.6.13 Remote Code Execution ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry

Jump to