{"id":"CVE-2022-30023","title":"Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.","summary":"Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"tenda","product":"hg9_firmware","affected":["hg9_firmware = 1.0.1"],"published":"2022-06-16","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-30023","references":[{"url":"https://github.com/Haniwa0x01/CVE-2022-30023","label":"cve@mitre.org"},{"url":"http://ont.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tenda.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/Haniwa0x01/CVE-2022-30023","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","in-the-wild","exploit-available"],"epss":0.39203,"epssPercentile":0.98576,"ingestedAt":"2026-07-06T17:03:24.419Z","exploited":true,"exploits":{"github":1,"githubRepos":["https://github.com/Haniwa0x01/CVE-2022-30023"],"checkedAt":"2026-09-21T15:25:22.804Z"},"exploitAvailable":true,"slug":"CVE-2022-30023","body":"## Overview\n\nTenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.\n\n## Affected\n\n- `hg9_firmware = 1.0.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":74,"depthScoreParts":{"impact":48.4,"likelihood":7.8,"exploitation":18,"ransomware":0},"changes":[{"seq":4620,"id":"CVE-2022-30023","ts":1788887194269,"field":"exploit_available","old":"false","new":"true"},{"seq":3503,"id":"CVE-2022-30023","ts":1788886310741,"field":"exploit_available","old":"true","new":"false"},{"seq":2357,"id":"CVE-2022-30023","ts":1788882980187,"field":"exploit_available","old":"false","new":"true"},{"seq":1386,"id":"CVE-2022-30023","ts":1788882392838,"field":"exploit_available","old":"true","new":"false"},{"seq":500,"id":"CVE-2022-30023","ts":1788881828692,"field":"exploit_available","old":"false","new":"true"},{"seq":46,"id":"CVE-2022-30023","ts":1783435999167,"field":"exploited","old":"false","new":"true"},{"seq":45,"id":"CVE-2022-30023","ts":1783435725944,"field":"exploited","old":"true","new":"false"},{"seq":44,"id":"CVE-2022-30023","ts":1783432391693,"field":"exploited","old":"false","new":"true"},{"seq":43,"id":"CVE-2022-30023","ts":1783432125245,"field":"exploited","old":"true","new":"false"},{"seq":42,"id":"CVE-2022-30023","ts":1783428779144,"field":"exploited","old":"false","new":"true"},{"seq":41,"id":"CVE-2022-30023","ts":1783428524522,"field":"exploited","old":"true","new":"false"},{"seq":40,"id":"CVE-2022-30023","ts":1783425173775,"field":"exploited","old":"false","new":"true"},{"seq":39,"id":"CVE-2022-30023","ts":1783424923844,"field":"exploited","old":"true","new":"false"},{"seq":38,"id":"CVE-2022-30023","ts":1783421564107,"field":"exploited","old":"false","new":"true"},{"seq":37,"id":"CVE-2022-30023","ts":1783421323030,"field":"exploited","old":"true","new":"false"},{"seq":36,"id":"CVE-2022-30023","ts":1783417954485,"field":"exploited","old":"false","new":"true"},{"seq":35,"id":"CVE-2022-30023","ts":1783417722301,"field":"exploited","old":"true","new":"false"},{"seq":34,"id":"CVE-2022-30023","ts":1783414344598,"field":"exploited","old":"false","new":"true"},{"seq":33,"id":"CVE-2022-30023","ts":1783414121097,"field":"exploited","old":"true","new":"false"},{"seq":32,"id":"CVE-2022-30023","ts":1783410736322,"field":"exploited","old":"false","new":"true"},{"seq":31,"id":"CVE-2022-30023","ts":1783410518236,"field":"exploited","old":"true","new":"false"},{"seq":30,"id":"CVE-2022-30023","ts":1783407091203,"field":"exploited","old":"false","new":"true"},{"seq":29,"id":"CVE-2022-30023","ts":1783406915741,"field":"exploited","old":"true","new":"false"},{"seq":28,"id":"CVE-2022-30023","ts":1783403467126,"field":"exploited","old":"false","new":"true"},{"seq":27,"id":"CVE-2022-30023","ts":1783403315057,"field":"exploited","old":"true","new":"false"},{"seq":26,"id":"CVE-2022-30023","ts":1783399846251,"field":"exploited","old":"false","new":"true"},{"seq":25,"id":"CVE-2022-30023","ts":1783399714371,"field":"exploited","old":"true","new":"false"},{"seq":24,"id":"CVE-2022-30023","ts":1783396181203,"field":"exploited","old":"false","new":"true"},{"seq":23,"id":"CVE-2022-30023","ts":1783396113653,"field":"exploited","old":"true","new":"false"},{"seq":22,"id":"CVE-2022-30023","ts":1783392564979,"field":"exploited","old":"false","new":"true"},{"seq":21,"id":"CVE-2022-30023","ts":1783392512982,"field":"exploited","old":"true","new":"false"},{"seq":20,"id":"CVE-2022-30023","ts":1783388941027,"field":"exploited","old":"false","new":"true"},{"seq":19,"id":"CVE-2022-30023","ts":1783388912294,"field":"exploited","old":"true","new":"false"},{"seq":18,"id":"CVE-2022-30023","ts":1783385317073,"field":"exploited","old":"false","new":"true"},{"seq":17,"id":"CVE-2022-30023","ts":1783381710850,"field":"exploited","old":"true","new":"false"},{"seq":16,"id":"CVE-2022-30023","ts":1783381691935,"field":"exploited","old":"false","new":"true"},{"seq":15,"id":"CVE-2022-30023","ts":1783378110186,"field":"exploited","old":"true","new":"false"},{"seq":14,"id":"CVE-2022-30023","ts":1783374690987,"field":"exploited","old":"false","new":"true"}]}