CVE-2022-25215

Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresses to (or from) a…

published March 7, 2022

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresses to (or from) a list of banned hosts. Clients with those MAC addresses are then prevented from accessing either the WAN or the router itself.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01149 · 66.5th percentile
Published
2022-03-07T21:53Z
EPSS history
Timeline
  • 07 MAR 21:53Z
    Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresses to (or from) a…
    cvelistv5