CVE-2022-33948

State: Published
Severity: Not scored
Published: Jul 4, 2022
Updated: Aug 3, 2024
Reserved: Jun 20, 2022

Description

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
HOME SPOT CUBE2KDDI CORPORATION	V102 and earlierAffected

References

https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/
https://jvn.jp/en/jp/JVN41017328/index.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.