High severity8.8NVD Advisory· Published Jul 4, 2022· Updated Jun 17, 2026

CVE-2022-33948

Description

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

au.com/HOME SPOT CUBE2llm-fuzzy
Range: = V102
KDDI CORPORATION/HOME SPOT CUBE2v5
Range: V102 and earlier

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN41017328/index.htmlnvdThird Party Advisory
www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/nvdProductVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000