Skip to content
CVE PROGRAM SOURCE RECORD2.1 Low

CVE-2022-32967

Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Realtek RTL8111EP-CG

  • unspecified to ≤ 3.0.0.2019090affected
  • 5.0.10affected

Realtek RTL8111FP-CG

  • unspecified to ≤ 3.0.0.2019090affected
  • 5.0.10affected

References