CVE-2022-30023

HighCVSS 8.8

Published: 16/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

41.82%

99th percentile - higher than 99% of all known CVEs

Summary

A command injection vulnerability was found in the Ping function of Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1. An attacker can remotely execute arbitrary system commands.

Risk Assessment

The risk for the organization includes potential takeover of the device, leading to network integrity compromise, data theft, or using the device as a pivot for further attacks.

Recommendation

Immediately update the device firmware to the latest available version. If no update is available, restrict access to the Ping function via firewall rules.

Original NVD description (English source)

Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.