What’s Vulnerable › Vulnerabilities

CVE-2022-23768: Neo Information Sys. NIS-HAP11AC remote access and manipulation vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-19 · updated 2026-06-17
• Weakness: CWE-284

Description

This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use this vulnerability to induce all attacks such as source code hijacking, remote control of the device.

Affected products

• Neo Information Systems Co., Ltd Home AP NIS-HAP11AC: 3.0-b20201117095902

References

• https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66928
• https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66928

Get alerted when CVE-2022-23768 or the next vulnerability affects your stack