What’s Vulnerable › Vulnerabilities

CVE-2022-48615

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-12 · updated 2026-06-17
• Weakness: CWE-284

Description

An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to obtain partial device information.

Affected products

• Huawei Ar617Vw Firmware: v300r21c00spc200

References

• https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/
• https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/

Get alerted when CVE-2022-48615 or the next vulnerability affects your stack