{"id":"CVE-2022-30023","published":"2022-06-16T14:28:27Z","modified":"2026-07-09T00:19:04Z","title":"Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.","provenance":"source","from":"CVE.org"},"summary":{"text":"A command injection flaw exists in the Ping function of the Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 device. An attacker can inject operating system commands through the Ping function.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:55Z"},"cvss":null,"epss":{"score":0.39203,"percentile":0.98596,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2022-12-21","exploitedFirstSeen":"2022-12-21","ransomware":false,"evidence":[{"url":"https://www.microsoft.com/en-us/security/blog/2022/12/21/microsoft-research-uncovers-new-zerobot-capabilities/","date":"2022-12-21"},{"url":"https://unit42.paloaltonetworks.com/mirai-variant-targets-iot-exploits/","date":"2023-06-22"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":11,"pulses":[{"name":"ripe.arin.enom.cpanel.cpcalendar.iana.networksolutions.02050.webdisk.webmail.","url":"https://otx.alienvault.com/pulse/69fdc02bea1e4ec923b01688","created":"2026-05-08"},{"name":"Mirai Botnet IOCs - SEC-1275-1","url":"https://otx.alienvault.com/pulse/64a3b0d4ac9aedef454fc0c0","created":"2023-07-04"},{"name":"DDoS Botnet, ZeroBot, Adds to its Capabilities","url":"https://otx.alienvault.com/pulse/63ac9a9b47285cdeaac87628","created":"2022-12-28"},{"name":"Microsoft research uncovers new Zerobot capabilities","url":"https://otx.alienvault.com/pulse/63a97aca4939331148964839","created":"2022-12-26"},{"name":"Microsoft research uncovers new Zerobot capabilities - Microsoft Security Blog","url":"https://otx.alienvault.com/pulse/63a5bd9e4b819d29d7b8f94c","created":"2022-12-23"},{"name":"Microsoft research uncovers new Zerobot capabilities","url":"https://otx.alienvault.com/pulse/63a5ae13d4a3401905954b4a","created":"2022-12-23"},{"name":"Microsoft research uncovers new Zerobot capabilities - Microsoft Security Blog","url":"https://otx.alienvault.com/pulse/63a5366d09707e5927d950b9","created":"2022-12-23"},{"name":"Microsoft research uncovers new Zerobot capabilities - Microsoft Security Blog","url":"https://otx.alienvault.com/pulse/63a4721874292cc0afb8a687","created":"2022-12-22"},{"name":"Zerobot Botnet Emerges as a Growing Threat with New Exploits and Capabilities","url":"https://otx.alienvault.com/pulse/63a456549775cb8accfd95dc","created":"2022-12-22"},{"name":"Zerobot Malware Now Exploits Apache Vulnerabilities","url":"https://otx.alienvault.com/pulse/63a44768c57d4c8dfbdc77f7","created":"2022-12-22"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://github.com/Haniwa0x01/CVE-2022-30023","tags":[]}],"techniques":[],"reports":[{"id":"SRC-b3ea000916d84bc1c41a","title":"Microsoft research uncovers new Zerobot capabilities","publisher":"microsoft.com","url":"http://www.microsoft.com/en-us/security/blog/2022/12/21/microsoft-research-uncovers-new-zerobot-capabilities/","date":null,"mentions":[{"quote":"Microsoft researchers have also found new evidence that Zerobot propagates by compromising devices with known vulnerabilities that are not included in the malware binary, such as CVE-2022-30023, a command injection vulnerability in Tenda GPON AC1200 routers.","start":5122,"end":5380},{"quote":"hich may be tied to Zerobot activity:\nCVE-2014-8361\nCVE-2016-20017\nCVE-2017-17105\nCVE-2017-17215\nCVE-2018-10561\nCVE-2018-20057\nCVE-2019-10655\nCVE-2020-7209\nCVE-2020-10987\nCVE-2020-25506\nCVE-2021-35395\nCVE-2021-36260\nCVE-2021-42013\nCVE-2021-46422\nCVE-2022-22965\nCVE-2022-25075\nCVE-2022-26186\nCVE-2022-26210\nCVE-2022-30023","start":11919,"end":12239}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2022-35238","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35238","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2022-06-15","earliestUrl":"https://github.com/Haniwa0x01/CVE-2022-30023","repos":[{"name":"Haniwa0x01/CVE-2022-30023","url":"https://github.com/Haniwa0x01/CVE-2022-30023","stars":8,"created":"2022-06-15"}]},"first":{"date":"2022-06-15","source":"PoC-in-GitHub","url":"https://github.com/Haniwa0x01/CVE-2022-30023"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2022-06-15","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/Haniwa0x01/CVE-2022-30023","provenance":"source"},{"date":"2022-06-16","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2022-30023","provenance":"source"},{"date":"2022-12-21","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.microsoft.com/en-us/security/blog/2022/12/21/microsoft-research-uncovers-new-zerobot-capabilities/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":66.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1408 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.72,"detail":"percentile 0.9860"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":2.45,"detail":"11 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}