CVE-2022-25215
Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove)
Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresses to (or from) a list of banned hosts. Clients with those MAC addresses are then prevented from accessing either the WAN or the router itself.
MEDIUM · CVSS 5.3
EPSS 0.00386
Schedule remediation
- Public exploit or PoC is available
Sigma rules0
YARA rules0