Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-29516

The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 NW(1100, 3200, 3500), IPCOM EX2 DC, IPCOM EX2 DC, IPCOM EX IN(2300, 2500, 2700), IPCOM EX LB(1100, 1300, 2300, 2500, 2700), IPCOM EX SC(1100, 1300, 2300, 2500, 2700), and IPCOM EX NW(1100, 1300, 2300, 2500, 2700)) allows a remote attacker to execute an arbitrary OS command via unspecified vectors.

Published

2022-05-18T15:15:10.123

Last Modified

2024-11-21T06:59:14.480

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-78

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	fujitsu	ipcom_ex2_nw_1100_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_nw_1100	-	No
Operating System	fujitsu	ipcom_ex2_nw_3500_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_nw_3500	-	No
Operating System	fujitsu	ipcom_ex2_nw_3200_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_nw_3200	-	No
Operating System	fujitsu	ipcom_ex2_sc_1100_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_sc_1100	-	No
Operating System	fujitsu	ipcom_ex2_sc_3500_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_sc_3500	-	No
Operating System	fujitsu	ipcom_ex2_sc_3200_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_sc_3200	-	No
Operating System	fujitsu	ipcom_ex2_lb_1100_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_lb_1100	-	No
Operating System	fujitsu	ipcom_ex2_lb_3500_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_lb_3500	-	No
Operating System	fujitsu	ipcom_ex2_lb_3200_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_lb_3200	-	No
Operating System	fujitsu	ipcom_ex2_in_1100_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_in_1100	-	No
Operating System	fujitsu	ipcom_ex2_in_3200_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_in_3200	-	No
Operating System	fujitsu	ipcom_ex2_in_3500_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_in_3500	-	No
Operating System	fujitsu	ipcom_ex2_dc_3500_firmware	< v02l21_nf0201	Yes
Hardware	fujitsu	ipcom_ex2_dc_3500	-	No
Operating System	fujitsu	ipcom_ex2_dc_3200_firmware	< v02l21_nf0201	Yes
Hardware	fujitsu	ipcom_ex2_dc_3200	-	No
Operating System	fujitsu	ipcom_ex_in_2300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_in_2300	-	No
Operating System	fujitsu	ipcom_ex_in_2500_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_in_2500	-	No
Operating System	fujitsu	ipcom_ex_in_2700_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_in_2700	-	No
Operating System	fujitsu	ipcom_ex_lb_1100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_lb_1100	-	No
Operating System	fujitsu	ipcom_ex_lb_1300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_lb_1300	-	No
Operating System	fujitsu	ipcom_ex_lb_2300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_lb_2300	-	No
Operating System	fujitsu	ipcom_ex_lb_2500_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_lb_2500	-	No
Operating System	fujitsu	ipcom_ex_lb_2700_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_lb_2700	-	No
Operating System	fujitsu	ipcom_ex_sc_1100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_sc_1100	-	No
Operating System	fujitsu	ipcom_ex_sc_1300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_sc_1300	-	No
Operating System	fujitsu	ipcom_ex_sc_2300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_sc_2300	-	No
Operating System	fujitsu	ipcom_ex_sc_2500_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_sc_2500	-	No
Operating System	fujitsu	ipcom_ex_sc_2700_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_sc_2700	-	No
Operating System	fujitsu	ipcom_ex_nw_1100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_nw_1100	-	No
Operating System	fujitsu	ipcom_ex_nw_1300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_nw_1300	-	No
Operating System	fujitsu	ipcom_ex_nw_2300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_nw_2300	-	No
Operating System	fujitsu	ipcom_ex_nw_2500_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_nw_2500	-	No
Operating System	fujitsu	ipcom_ex_nw_2700_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_nw_2700	-	No
Operating System	fujitsu	ipcom_ve2_ls_100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_100	-	No
Operating System	fujitsu	ipcom_ve2_ls_200_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_200	-	No
Operating System	fujitsu	ipcom_ve2_ls_220_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_220	-	No
Operating System	fujitsu	ipcom_ve2_ls_plus_100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_plus_100	-	No
Operating System	fujitsu	ipcom_ve2_ls_plus_200_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_plus_200	-	No
Operating System	fujitsu	ipcom_ve2_ls_plus_220_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_plus_220	-	No
Operating System	fujitsu	ipcom_ve2_ls_plus2_200_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_plus2_200	-	No
Operating System	fujitsu	ipcom_ve2_ls_plus2_220_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_plus2_220	-	No
Operating System	fujitsu	ipcom_ve2_sc_100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_100	-	No
Operating System	fujitsu	ipcom_ve2_sc_200_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_200	-	No
Operating System	fujitsu	ipcom_ve2_sc_220_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_220	-	No
Operating System	fujitsu	ipcom_ve2_sc_plus_100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_plus_100	-	No
Operating System	fujitsu	ipcom_ve2_sc_plus_200_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_plus_200	-	No
Operating System	fujitsu	ipcom_ve2_sc_plus_220_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_plus_220	-	No

References

https://jvn.jp/en/jp/JVN96561229/index.html Third Party Advisory ([email protected])
https://www.fujitsu.com/jp/products/network/support/2022/ipcom-01/ Vendor Advisory ([email protected])
https://jvn.jp/en/jp/JVN96561229/index.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.fujitsu.com/jp/products/network/support/2022/ipcom-01/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)