CVE-2022-45701
HIGHArris TG2482A Firmware <= 9.1.103GEM9 - Remote Code Execution via Ping Utility
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2022-45701. PoCs published by Yerodin Richards, yerodin, geniuszly.
AI-analyzed exploit summary This exploit leverages an authenticated RCE vulnerability in Arris Router Firmware 9.1.103 by manipulating SNMP OID values to execute a reverse shell via netcat. The payload is injected into specific OIDs to achieve command execution.
Description
Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.
Exploits (4)
This exploit leverages an authenticated RCE vulnerability in Arris Router Firmware 9.1.103 by manipulating SNMP OID values to execute a reverse shell via netcat. The payload is injected into specific OIDs to achieve command execution.
This PoC exploits an authenticated RCE vulnerability in Arris Router Firmware 9.1.103 by leveraging SNMP OID manipulation to execute a reverse shell. The exploit uses base64-encoded credentials for authentication and constructs a payload to trigger a netcat-based reverse shell.
This Python script exploits CVE-2022-45701, a remote code execution vulnerability in Arris routers, by manipulating SNMP settings via the web interface to execute arbitrary commands. It includes a reverse shell payload and requires authentication.
This repository contains a functional Python exploit for CVE-2022-45701, targeting Arris routers. The exploit leverages SNMP manipulation via the web interface to achieve remote code execution (RCE) by setting specific OID values and injecting a reverse shell payload.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H