Lucene search

[email protected]CVE-2022-43464

HistoryDec 07, 2022 - 4:15 a.m.

CVE-2022-43464

2022-12-0704:15:10

[email protected]

web.nvd.nist.gov

cve

udr-ja1604

udr-ja1608

udr-ja1616

firmware

vulnerability

remote attacker

os command

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.9%

JSON

Hidden functionality vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

Affected configurations

Vulners

NVD

Node

unimo_technology_co.\,_ltdudr-ja1604\/udr-ja1608\/udr-ja1616Match71x10.1.107112.43A

CPENameOperatorVersion
unimo:udr-ja1604_firmwareunimo udr-ja1604 firmwarelt71x10.1.107114.43a

CPE	Name	Operator	Version
unimo:udr-ja1604_firmware	unimo udr-ja1604 firmware	lt	71x10.1.107114.43a

CNA Affected

[
  {
    "vendor": "UNIMO Technology Co., Ltd",
    "product": "UDR-JA1604/UDR-JA1608/UDR-JA1616",
    "versions": [
      {
        "version": "firmware versions 71x10.1.107112.43A and earlier",
        "status": "affected"
      }
    ]
  }
]

References

www.unimo.co.jp/table_notice/index.php?act=1&resid=1666831567-004418

jvn.jp/en/vu/JVNVU94514762/index.html

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.9%

JSON

Related for CVE-2022-43464

prion1 cvelist1 nvd1