VYPR
← All advisories
Low severity2.1NVD Advisory· Published Nov 29, 2022· Updated Jun 17, 2026

CVE-2022-32967

CVE-2022-32967

Description

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Realtek/RTL8111EP-CG/RTL8111FP-CGllm-create3 versions
    (expand)+ 2 more
    • (no CPE)
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified
  • Realtek/Rtl8111ep Cg Firmware2 versions
    cpe:2.3:o:realtek:rtl8111ep-cg_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:realtek:rtl8111ep-cg_firmware:*:*:*:*:*:*:*:*range: <=3.0.0.2019090
    • cpe:2.3:o:realtek:rtl8111ep-cg_firmware:5.0.10:*:*:*:*:*:*:*
  • Realtek/Rtl8111fp Cg Firmware2 versions
    cpe:2.3:o:realtek:rtl8111fp-cg_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:realtek:rtl8111fp-cg_firmware:*:*:*:*:*:*:*:*range: <=3.0.0.2019090
    • cpe:2.3:o:realtek:rtl8111fp-cg_firmware:5.0.10:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.