https://vulnerability.circl.lu/sightings/feed 2026-05-14T02:58:34.058955+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/21e5790d-fad4-42c3-abac-3af410235aae/export 2026-05-14T02:58:34.480829+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "21e5790d-fad4-42c3-abac-3af410235aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25219", "type": "seen", "source": "https://t.me/cibsecurity/38667", "content": "\u203c CVE-2022-25219 \u203c\n\nA null byte interaction error has been discovered in the code that the telnetd_startup daemon uses to construct a pair of ephemeral passwords that allow a user to spawn a telnet service on the router, and to ensure that the telnet service persists upon reboot. By means of a crafted exchange of UDP packets, an unauthenticated attacker on the local network can leverage this null byte interaction error in such a way as to make those ephemeral passwords predictable (with 1-in-94 odds). Since the attacker must manipulate data processed by the OpenSSL function RSA_public_decrypt(), successful exploitation of this vulnerability depends on the use of an unpadded RSA cipher (CVE-2022-25218).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-10T20:13:12.000000Z"} 2022-03-10T20:13:12+00:00