CVE-2022-41436 - Vulnerability Details - OpenCVE

An issue in OXHOO TP50 OXH1.50 allows unauthenticated attackers to access the administrative panel via browsing to the URL http://device_ip/index1.html.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Oxhoo	Tp50 Tp50 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:oxhoo:tp50_firmware:oxh1.50:*:*:*:*:*:*:*

cpe:2.3:h:oxhoo:tp50:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/NF-Security-Team/CVEs/blob/main/CVE-OXHOO/Readme.md

History

Wed, 14 May 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-10-14T00:00:00.000Z

Updated: 2025-05-14T15:19:51.737Z

Reserved: 2022-09-26T00:00:00.000Z

Link: CVE-2022-41436

Vulnrichment

Updated: 2024-08-03T12:42:46.263Z

NVD

Status : Modified

Published: 2022-10-14T21:15:09.903

Modified: 2025-05-14T16:15:23.347

Link: CVE-2022-41436

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:oxhoo:tp50_firmware:oxh1.50:*:*:*:*:*:*:*", "matchCriteriaId": "1324A76E-6318-483A-B8F2-00BE7330CB01", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:oxhoo:tp50:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F4CC1CB-D648-4E6A-9511-90CE53DD9A25", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue in OXHOO TP50 OXH1.50 allows unauthenticated attackers to access the administrative panel via browsing to the URL http://device_ip/index1.html."}, {"lang": "es", "value": "Un problema en OXHOO TP50 versi\u00f3n OXH1.50, permite a atacantes no autenticados acceder al panel administrativo por medio de la navegaci\u00f3n a la URL http://device_ip/index1.html"}], "id": "CVE-2022-41436", "lastModified": "2025-05-14T16:15:23.347", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2022-10-14T21:15:09.903", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/NF-Security-Team/CVEs/blob/main/CVE-OXHOO/Readme.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/NF-Security-Team/CVEs/blob/main/CVE-OXHOO/Readme.md"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-287"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}