CVE Tools
Sign in

CVE-2022-25667

Published: Nov 15, 2022Updated: Apr 22, 2025 Sources: CVE List NVD BDUCWE-287
7.5HIGH
NVD MITRE
EPSS Score
0.3%
Top 73.9%
CISA KEV
Not in KEV
Exploits
No Known Exploits
Remediation
Patch Available
Self-Check
OpenVAS

Description

Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking

No summary for this CVE yet.

CVSS Vector Breakdown

AV:NAC:LPR:NUI:NS:UC:HI:NA:N
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:NPrivileges Required
None
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:NIntegrity
None
A:NAvailability
None
Open in CVSS calculator →

Weaknesses

CWE-287

Affected Products

qualcomm
commercial·USaka qualcomm, inc., qualcomm incorporated, qualcomm inc
ar9380 firmware
Hardware Firmware
csr8811 firmware
Hardware Firmware
ipq4018 firmware
Hardware Firmware
ipq4019 firmware
Hardware Firmware
ipq4028 firmware
Hardware Firmware
ipq4029 firmware
Hardware Firmware
ipq5010 firmware
Hardware Firmware
ipq5018 firmware
Hardware Firmware
TP-Link Technologies Co Ltd.
commercial·CNaka tl-wr841n, tl-wr940n, tl-wr886n
TL-XVR1800L
Networking Infrastructure
TL-XDR 1860
Networking Infrastructure
TL-WAR1200L
Networking Infrastructure
TL-WDR7660
Networking Infrastructure
TL-WR845N
Networking Infrastructure
Shenzhen Tenda Technology Co., Ltd.
commercial·CNaka tenda
Tenda AX12On-premNetwork Device
Networking Infrastructure / router-switch
Tenda AC23On-premNetwork Device
Networking Infrastructure / router-switch
Tenda AC11On-premNetwork Device
Networking Infrastructure / router-switch
Tenda AC10On-premNetwork Device
Networking Infrastructure / router-switch
Huawei Technologies Co., Ltd.
commercial·CNaka huawei
Huawei AX3 ProMixed
Operating Systems / mobile-os
Huawei AX2 ProMixed
Operating Systems / mobile-os
Huawei WS5281On-premNetwork Device
Networking Infrastructure / router-switch
Huawei WS5102On-premNetwork Device
Networking Infrastructure / router-switch
Ruijie Networks Co., Ltd.
commercial
Rg-ew1200g ProOn-premNetwork Device
Networking Infrastructure / router-switch
Rg-ew1800gx ProOn-premNetwork Device
Networking Infrastructure / router-switch
Rg-ew1200 ProEmbeddedNetwork Device
Networking Infrastructure / router-switch
MERCURY
commercialaka mer1200g firmware, mer1200 firmware, km08-708h giga wifi wave2
Mercury D121Embedded
Networking Infrastructure / router-switch
Mercury X18GEmbedded
Networking Infrastructure / router-switch
Mercury MW325REmbedded
Networking Infrastructure / router-switch
and 69 more affected products View all →

Exploitability

Official Patch Available
Is your org exposed to CVE-2022-25667?We can run the check for you — a free external exposure review, no install. Check my exposure

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

2 techniques
Initial Access
View detailed technique mapping

References

https://www.opennet.ru/opennews/art.shtml?num=58935
opennet.ru
https://wifi-interception.github.io/
wifi-interception.github.io
https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin
qualcomm.com

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2022-25667 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows