CVE-2022-23768
Neo Information Sys. NIS-HAP11AC remote access and manipulation vulnerability
- State
- Published
- Severity
- 8.8 High
- Published
- Sep 19, 2022
- Updated
- Jun 3, 2025
- Reserved
- Jan 19, 2022
Description
This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use this vulnerability to induce all attacks such as source code hijacking, remote control of the device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | krcert |
Weaknesses
- CWE-284 Improper Access Control
Affected Products
| Product | Versions |
|---|---|
Home AP NIS-HAP11ACNeo Information Systems Co., Ltd |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.