CVE-2022-32967: Realtek RTL8111EP-Cg Firmware

Low severity, CVSS 2.1. EPSS: 0.2% chance of exploitation in the next 30 days.

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information.

Affected products

• Realtek RTL8111EP-Cg Firmware: up to and including 3.0.0.2019090; version 5.0.10 only
• Realtek RTL8111FP-Cg Firmware: up to and including 3.0.0.2019090; version 5.0.10 only

Published 2022-11-29. Last modified 2026-06-17.