Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-25621

UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, UNIVERGE WA WA2612-AP Ver8.2.11 and prior allows a remote attacker to execute arbitrary OS commands.

Published

2022-03-11T18:15:41.210

Last Modified

2024-11-21T06:52:27.577

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System nec univerge_wa1020_firmware ≤ 8.2.11 Yes
Hardware nec univerge_wa1020 - No
Operating System nec univerge_wa1510_firmware ≤ 8.2.11 Yes
Hardware nec univerge_wa1510 - No
Operating System nec univerge_wa1511_firmware ≤ 8.2.11 Yes
Hardware nec univerge_wa1511 - No
Operating System nec univerge_wa1512_firmware ≤ 8.2.11 Yes
Hardware nec univerge_wa1512 - No
Operating System nec univerge_wa2020_firmware ≤ 8.2.11 Yes
Hardware nec univerge_wa2020 - No
Operating System nec univerge_wa2021_firmware ≤ 8.2.11 Yes
Hardware nec univerge_wa2021 - No
Operating System nec univerge_wa2610-ap_firmware ≤ 8.2.11 Yes
Hardware nec univerge_wa2610-ap - No
Operating System nec univerge_wa2611-ap_firmware ≤ 8.2.11 Yes
Hardware nec univerge_wa2611-ap - No
Operating System nec univerge_wa2611e-ap_firmware ≤ 8.2.11 Yes
Hardware nec univerge_wa2611e-ap - No
Operating System nec univerge_wa2612-ap_firmware ≤ 8.2.11 Yes
Hardware nec univerge_wa2612-ap - No
References