CVE-2022-47040

An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running the tcpdump command after placing a crafted file in the /tmp directory and sending crafted packets through port 80.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2023-01-26

Last modified

2025-04-02

Weaknesses

CWE-276

Affected products

• Rtf3505vw-n1 Firmware (Askey)

References

• https://github.com/leoservalli/Privilege-escalation-ASKEY