CVE-2022-26998

Publication date

2022-03-15 21:56:30

Family

mitre

State

PUBLISHED

Description

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.