Lucene search

[email protected]CVE-2022-35733

HistoryAug 23, 2022 - 2:15 a.m.

CVE-2022-35733

2022-08-2302:15:07

CWE-306

[email protected]

web.nvd.nist.gov

cve

2022

35733

missing authentication

critical function

vulnerability

unimo technology

digital video recorders

udr-ja1004

udr-ja1008

udr-ja1016

firmware

remote attacker

arbitrary os command

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.2%

JSON

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.

Affected configurations

NVD

Node

unimoudr-ja1004Match-

AND

unimoudr-ja1004_firmwareRange≤1.0.20.13

Node

unimoudr-ja1008Match-

AND

unimoudr-ja1008_firmwareRange≤1.0.20.13

Node

unimoudr-ja1016Match-

AND

unimoudr-ja1016_firmwareRange≤2.0.20.13

CPENameOperatorVersion
unimo:udr-ja1004_firmwareunimo udr-ja1004 firmwarele1.0.20.13

CPE	Name	Operator	Version
unimo:udr-ja1004_firmware	unimo udr-ja1004 firmware	le	1.0.20.13

CNA Affected

[
  {
    "product": "UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016",
    "vendor": "UNIMO Technology Co., Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier"
      }
    ]
  }
]

References

www.unimo.co.jp/table_notice/index.php?act=1&resid=1643590226-637355

jvn.jp/en/vu/JVNVU90821877/index.html

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.2%

JSON

Related for CVE-2022-35733

prion1 cvelist1 nvd1