CVE-2022-26995

Published: 2022-03-15T22:15Z

Last Modified: 2024-11-21T06:54Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip, pptp_fix_mask, pptp_fix_gw, and wan_dns1_stat parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt