CVE-2022-27000

Name of the Vulnerable Software and Affected Versions Arris TR3300 version 1.0.13

Description The issue is related to a command injection vulnerability in the time and time zone function. This vulnerability is exploited via the h primary ntp server, h backup ntp server, and h time zone parameters, allowing attackers to execute arbitrary commands through a crafted request.

Recommendations For Arris TR3300 version 1.0.13, consider restricting access to the time and time zone function to minimize the risk of exploitation. Avoid using the h primary ntp server, h backup ntp server, and h time zone parameters in crafted requests until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.