Vulnerability · Published Jun 8, 2020 · Assigned by twcert
CVE-2020-12773Realtek ADSL/PON Modem SoC - Security Misconfiguration
Critical 9.6
In plain English
A critical-severity security flaw in ADSL/PON Modem SoC from Realtek. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 67% of all known vulnerabilities).
Severity (CVSS 3.1)9.6Critical
Exploit odds (30 days)1.2%top 32.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A security misconfiguration vulnerability exists in the SDK of some Realtek ADSL/PON Modem SoC firmware, which allows attackers using a default password to execute arbitrary commands remotely via the build-in network monitoring tool.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Realtek | ADSL/PON Modem SoC | see references |
References
- https://www.twcert.org.tw/tw/cp-132-3681-2a3f6-1.html x_refsource_MISC