Lucene search

[email protected]CVE-2022-44606

HistoryDec 07, 2022 - 4:15 a.m.

CVE-2022-44606

2022-12-0704:15:11

CWE-78

[email protected]

web.nvd.nist.gov

cve-2022-44606

udr-ja1604

udr-ja1608

udr-ja1616

os command injection

firmware vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.1%

JSON

OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

Affected configurations

Vulners

NVD

Node

unimo_technology_co.\,_ltdudr-ja1604\/udr-ja1608\/udr-ja1616Match71x10.1.107112.43A

CPENameOperatorVersion
unimo:udr-ja1604_firmwareunimo udr-ja1604 firmwarelt71x10.1.107114.43a

CPE	Name	Operator	Version
unimo:udr-ja1604_firmware	unimo udr-ja1604 firmware	lt	71x10.1.107114.43a

CNA Affected

[
  {
    "vendor": "UNIMO Technology Co., Ltd",
    "product": "UDR-JA1604/UDR-JA1608/UDR-JA1616",
    "versions": [
      {
        "version": "firmware versions 71x10.1.107112.43A and earlier",
        "status": "affected"
      }
    ]
  }
]

References

www.unimo.co.jp/table_notice/index.php?act=1&resid=1666831567-004418

jvn.jp/en/vu/JVNVU94514762/index.html

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.1%

JSON

Related for CVE-2022-44606

prion1 nvd1 cvelist1