CVE-2022-25915

🗓️ 31 Mar 2022 08:55:11Reported by jpcertType

Improper access control in ELECOM LAN routers allows authenticated attacker to bypass access restrictions

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-25915	31 Mar 202209:15	–	attackerkb
Circl	CVE-2022-25915	31 Mar 202212:18	–	circl
CNNVD	Elecom elecom lan 安全漏洞	31 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-25915	31 Mar 202208:55	–	cvelist
EUVD	EUVD-2022-30501	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#88993473: Multiple vulnerabilities in multiple ELECOM LAN routers	30 Nov 202100:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in multiple ELECOM LAN routers	30 Nov 202107:23	–	jvn
NVD	CVE-2022-25915	31 Mar 202209:15	–	nvd
OSV	CVE-2022-25915	31 Mar 202209:15	–	osv
Prion	Improper access control	31 Mar 202209:15	–	prion

NVD

Vulners

Node

elecom wrc-1167gst2_firmwareRange≤1.25

AND

elecom wrc-1167gst2Match-

Node

elecom wrc-1167gst2a_firmwareRange≤1.25

AND

elecom wrc-1167gst2aMatch-

Node

elecom wrc-1167gst2h_firmwareRange≤1.25

AND

elecom wrc-1167gst2hMatch-

Node

elecom wrc-2533gs2-b_firmwareRange≤1.52

AND

elecom wrc-2533gs2-bMatch-

Node

elecom wrc-2533gs2-w_firmwareRange≤1.52

AND

elecom wrc-2533gs2-wMatch-

Node

elecom wrc-1750gs_firmwareRange≤1.03

AND

elecom wrc-1750gsMatch-

Node

elecom wrc-1750gsv_firmwareRange≤2.11

AND

elecom wrc-1750gsvMatch-

Node

elecom wrc-1900gst_firmwareRange≤1.03

AND

elecom wrc-1900gstMatch-

Node

elecom wrc-2533gst_firmwareRange≤1.03

AND

elecom wrc-2533gstMatch-

Node

elecom wrc-2533gst2_firmwareRange≤1.25

AND

elecom wrc-2533gst2Match-

Node

elecom wrc-2533gsta_firmwareRange≤1.03

AND

elecom wrc-2533gstaMatch-

Node

elecom wrc-2533gst2sp_firmwareRange≤1.25

AND

elecom wrc-2533gst2spMatch-

Node

elecom wrc-2533gst2-g_firmwareRange≤1.25

AND

elecom wrc-2533gst2-gMatch-

Node

elecom edwrc-2533gst2_firmwareRange≤1.25

AND

elecom edwrc-2533gst2Match-

Node

elecom wrc-1167gs2-b_firmwareRange≤1.65

AND

elecom wrc-1167gs2-bMatch-

Node

elecom wrc-1167gs2h-b_firmwareRange≤1.65

AND

elecom wrc-1167gs2h-bMatch-

Node

elecom wmc-dlgst2-w_firmwareRange≤1.24

AND

elecom wmc-dlgst2-wMatch-

Node

elecom wmc-m1267gst2-w_firmwareRange≤1.24

AND

elecom wmc-m1267gst2-wMatch-

Node

elecom wmc-2hc-w_firmwareRange≤1.24

AND

elecom wmc-2hc-wMatch-

Node

elecom wmc-c2533gst-w_firmwareRange≤1.24

AND

elecom wmc-c2533gst-wMatch-

Node

elecom wrc-1900gst2_firmwareRange≤1.15

AND

elecom wrc-1900gst2Match-

Node

elecom wrc-1900gst2sp_firmwareRange≤1.15

AND

elecom wrc-1900gst2spMatch-

Node

elecom wrc-1750gst2_firmwareRange≤1.14

AND

elecom wrc-1750gst2Match-

[
  {
    "product": "ELECOM LAN routers",
    "vendor": "ELECOM CO.,LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior"
      }
    ]
  }
]

Source	Link
elecom	www.elecom.co.jp/news/security/20211130-01/
jvn	www.jvn.jp/en/jp/JVN88993473/

21 Nov 2024 06:53Current

8.3High risk

Vulners AI Score8.3

CVSS 25.8

CVSS 3.18.8

EPSS0.00155