Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-29516

The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 NW(1100, 3200, 3500), IPCOM EX2 DC, IPCOM EX2 DC, IPCOM EX IN(2300, 2500, 2700), IPCOM EX LB(1100, 1300, 2300, 2500, 2700), IPCOM EX SC(1100, 1300, 2300, 2500, 2700), and IPCOM EX NW(1100, 1300, 2300, 2500, 2700)) allows a remote attacker to execute an arbitrary OS command via unspecified vectors.

Security Impact Summary

This vulnerability carries a CRITICAL severity rating with a CVSS v3.1 score of 9.8, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 92 products from fujitsu, from fujitsu, from fujitsu and 89 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2022, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2022-05-18T15:15:10.123

Last Modified

2024-11-21T06:59:14.480

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-78

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	fujitsu	ipcom_ex2_nw_1100_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_nw_1100	-	No
Operating System	fujitsu	ipcom_ex2_nw_3500_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_nw_3500	-	No
Operating System	fujitsu	ipcom_ex2_nw_3200_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_nw_3200	-	No
Operating System	fujitsu	ipcom_ex2_sc_1100_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_sc_1100	-	No
Operating System	fujitsu	ipcom_ex2_sc_3500_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_sc_3500	-	No
Operating System	fujitsu	ipcom_ex2_sc_3200_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_sc_3200	-	No
Operating System	fujitsu	ipcom_ex2_lb_1100_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_lb_1100	-	No
Operating System	fujitsu	ipcom_ex2_lb_3500_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_lb_3500	-	No
Operating System	fujitsu	ipcom_ex2_lb_3200_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_lb_3200	-	No
Operating System	fujitsu	ipcom_ex2_in_1100_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_in_1100	-	No
Operating System	fujitsu	ipcom_ex2_in_3200_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_in_3200	-	No
Operating System	fujitsu	ipcom_ex2_in_3500_firmware	< v01l05_nf0501	Yes
Hardware	fujitsu	ipcom_ex2_in_3500	-	No
Operating System	fujitsu	ipcom_ex2_dc_3500_firmware	< v02l21_nf0201	Yes
Hardware	fujitsu	ipcom_ex2_dc_3500	-	No
Operating System	fujitsu	ipcom_ex2_dc_3200_firmware	< v02l21_nf0201	Yes
Hardware	fujitsu	ipcom_ex2_dc_3200	-	No
Operating System	fujitsu	ipcom_ex_in_2300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_in_2300	-	No
Operating System	fujitsu	ipcom_ex_in_2500_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_in_2500	-	No
Operating System	fujitsu	ipcom_ex_in_2700_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_in_2700	-	No
Operating System	fujitsu	ipcom_ex_lb_1100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_lb_1100	-	No
Operating System	fujitsu	ipcom_ex_lb_1300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_lb_1300	-	No
Operating System	fujitsu	ipcom_ex_lb_2300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_lb_2300	-	No
Operating System	fujitsu	ipcom_ex_lb_2500_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_lb_2500	-	No
Operating System	fujitsu	ipcom_ex_lb_2700_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_lb_2700	-	No
Operating System	fujitsu	ipcom_ex_sc_1100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_sc_1100	-	No
Operating System	fujitsu	ipcom_ex_sc_1300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_sc_1300	-	No
Operating System	fujitsu	ipcom_ex_sc_2300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_sc_2300	-	No
Operating System	fujitsu	ipcom_ex_sc_2500_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_sc_2500	-	No
Operating System	fujitsu	ipcom_ex_sc_2700_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_sc_2700	-	No
Operating System	fujitsu	ipcom_ex_nw_1100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_nw_1100	-	No
Operating System	fujitsu	ipcom_ex_nw_1300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_nw_1300	-	No
Operating System	fujitsu	ipcom_ex_nw_2300_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_nw_2300	-	No
Operating System	fujitsu	ipcom_ex_nw_2500_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_nw_2500	-	No
Operating System	fujitsu	ipcom_ex_nw_2700_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ex_nw_2700	-	No
Operating System	fujitsu	ipcom_ve2_ls_100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_100	-	No
Operating System	fujitsu	ipcom_ve2_ls_200_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_200	-	No
Operating System	fujitsu	ipcom_ve2_ls_220_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_220	-	No
Operating System	fujitsu	ipcom_ve2_ls_plus_100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_plus_100	-	No
Operating System	fujitsu	ipcom_ve2_ls_plus_200_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_plus_200	-	No
Operating System	fujitsu	ipcom_ve2_ls_plus_220_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_plus_220	-	No
Operating System	fujitsu	ipcom_ve2_ls_plus2_200_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_plus2_200	-	No
Operating System	fujitsu	ipcom_ve2_ls_plus2_220_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_ls_plus2_220	-	No
Operating System	fujitsu	ipcom_ve2_sc_100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_100	-	No
Operating System	fujitsu	ipcom_ve2_sc_200_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_200	-	No
Operating System	fujitsu	ipcom_ve2_sc_220_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_220	-	No
Operating System	fujitsu	ipcom_ve2_sc_plus_100_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_plus_100	-	No
Operating System	fujitsu	ipcom_ve2_sc_plus_200_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_plus_200	-	No
Operating System	fujitsu	ipcom_ve2_sc_plus_220_firmware	< e20l33_nf1101	Yes
Hardware	fujitsu	ipcom_ve2_sc_plus_220	-	No

References

https://jvn.jp/en/jp/JVN96561229/index.html Third Party Advisory ([email protected])
https://www.fujitsu.com/jp/products/network/support/2022/ipcom-01/ Vendor Advisory ([email protected])
https://jvn.jp/en/jp/JVN96561229/index.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.fujitsu.com/jp/products/network/support/2022/ipcom-01/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For fujitsu's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.