CVE-2022-45725
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
Comfast CF-WR6110N router version V2.3.1 has an improper input validation vulnerability. A remote attacker on the same network can send a crafted HTTP POST request and execute arbitrary code on the device.
Risk Assessment
An attacker can take full control of the router, modify its configuration, intercept network traffic, or use it as a pivot point for further attacks within the internal network.
Recommendation
Immediately update the router firmware to the latest available version or consider replacing the device with a model that has current vendor support.
Original NVD description (English source)
Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute arbitrary code on the target via an HTTP POST request