What’s Vulnerable › Vulnerabilities

CVE-2022-48616

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-12 · updated 2026-06-17
• Weakness: CWE-78

Description

A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher privileges.

Affected products

• Huawei Ar617Vw Firmware: v300r21c00spc200

References

• https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/
• https://wr3nchsr.github.io/huawei-netengine-ar617vw-auth-root-rce/

Get alerted when CVE-2022-48616 or the next vulnerability affects your stack