What’s Vulnerable › Vulnerabilities

CVE-2022-28371

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-07-14 · updated 2026-06-17
• Weakness: CWE-798

Description

On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is embedded in the firmware, and is identical across the fleet of devices. An attacker need only download this firmware and extract the private components of these certificates (from /etc/lighttpd.d/ca.pem and /etc/lighttpd.d/server.pem) to gain access. (The firmware download location is shown in a device's upgrade logs.)

Affected products

• Verizon Lvskihp Indoorunit Firmware: 3.4.66.162
• Verizon Lvskihp Outdoorunit Firmware: 3.33.101.0

References

• https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md
• https://www.verizon.com/info/reportsecurityvulnerability/
• https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md
• https://www.verizon.com/info/reportsecurityvulnerability/

Get alerted when CVE-2022-28371 or the next vulnerability affects your stack