CVE:CVE-2022-26990
CNNVD:CNNVD-202203-1489
ARRIS SBR-AC1900P和ARRIS SBR-AC3200P都是美国ARRIS公司的产品。ARRIS SBR-AC1900P是一款 802.11ac 双频并发 Wi-Fi路由器。ARRIS SBR-AC3200P是一款 802.11ac 三频并发 Wi-Fi路由器。
ARRIS 路由器 SBR-AC1900P 1.0.7-B05、SBR-AC3200P 1.0.7-B05 和 SBR-AC1200P 1.0.5-B05 存在操作系统命令注入漏洞，该漏洞允许攻击者通过精心制作的请求执行任意命令。
solution:Upgrade arris sbr-ac1900p_firmware to a higher version than 1.0.7-b05,and avoid the version 1.0.7-b05; Upgrade arris sbr-ac3200p_firmware to a higher version than 1.0.7-b05,and avoid the version 1.0.7-b05; Upgrade arris sbr-ac1200p_firmware to a higher version than 1.0.5-b05,and avoid the version 1.0.5-b05