Verizon Lvskihp Indoorunit Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Verizon Lvskihp Indoorunit Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-28369 — CVSS 9.8 (critical): Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enable_ssh…
• CVE-2022-28373 — CVSS 9.8 (critical): Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not properly sanitize user-controlled parameters within the crtcreadpartition…
• CVE-2022-28371 — CVSS 7.5 (high): On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a…
• CVE-2022-28372 — CVSS 7.5 (high): On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints provide a…
• CVE-2022-28377 — CVSS 7.5 (high): On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a…