VYPR

LVSKIHP InDoorUnit (IDU)

by Verizon

CVEs (1)

  • CVE-2022-28369CriJul 14, 2022
    risk 0.64cvss 9.8epss 0.01

    Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enable_ssh sub-operation of the crtcrpc JSON listener (found at /lib/functions/wnc_jsonsh/crtcmode.sh) A remote attacker on the local network can provide a…