CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server

published July 4, 2022

CVSS
—
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00907 · 59.5th percentile
Published
2022-07-04T01:50Z
EPSS history
Timeline
  • 04 JUL 01:50Z
    HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server
    cvelistv5