CVE-2022-31898

MEDIUM 6.8EPSS 15.8%

gl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214 were discovered to contain multiple command injection vulnerabilities via the ping_addr and trace_addr function parameters.

CVSS v3.1: 6.8 MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 6.8 MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 15.81% chance of exploitation in the next 30 days, 97th percentile
Published: 2022-10-27
Updated: 2025-05-07

Proof-of-concept exploits (2)

https://boschko.ca/glinet-router
gigaryte/cve-2022-3189818★ · 2022-11-17

References

Related