A command injection flaw exists in the Ping function of the Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 device. An attacker can inject operating system commands through the Ping function.
First seen exploited 6 months after disclosure. Public exploit code (PoC-in-GitHub) was available 1 day before disclosure.
No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
Reports are matched by finding the exact id CVE-2022-30023 in their text; nobody has reviewed the match. One passage is shown per report, at most 320 characters, linked to the original.
Microsoft researchers have also found new evidence that Zerobot propagates by compromising devices with known vulnerabilities that are not included in the malware binary, such as CVE-2022-30023, a command injection vulnerability in Tenda GPON AC1200 routers.
2 passages name itOriginal (opens in a new tab) ↗
Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.