CVE-2022-45701

A vulnerability in the firmware of the Arris TG2482A router up to version 9.1.103GEM9 allows remote code execution (RCE) via the ping utility feature. An attacker can exploit this flaw to gain control over the device.

The risk for the organization is the potential for remote takeover of the router, which could lead to breaches of network data confidentiality and integrity, as well as further attacks on the infrastructure.

It is recommended to immediately update the firmware of the Arris TG2482A router to the latest available version that fixes this vulnerability. If an update is not available, restrict access to the ping function from external networks.