Lucene search

[email protected]CVE-2022-44620

HistoryDec 07, 2022 - 4:15 a.m.

CVE-2022-44620

2022-12-0704:15:11

CWE-287

[email protected]

web.nvd.nist.gov

cve-2022-44620

improper authentication

udr-ja1604

udr-ja1608

udr-ja1616

firmware vulnerability

remote authenticated attacker

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.9%

JSON

Improper authentication vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

Affected configurations

Vulners

NVD

Node

unimo_technology_co.\,_ltdudr-ja1604\/udr-ja1608\/udr-ja1616Match71x10.1.107112.43A

CPENameOperatorVersion
unimo:udr-ja1604_firmwareunimo udr-ja1604 firmwarelt71x10.1.107114.43a

CPE	Name	Operator	Version
unimo:udr-ja1604_firmware	unimo udr-ja1604 firmware	lt	71x10.1.107114.43a

CNA Affected

[
  {
    "vendor": "UNIMO Technology Co., Ltd",
    "product": "UDR-JA1604/UDR-JA1608/UDR-JA1616",
    "versions": [
      {
        "version": "firmware versions 71x10.1.107112.43A and earlier",
        "status": "affected"
      }
    ]
  }
]

References

www.unimo.co.jp/table_notice/index.php?act=1&resid=1666831567-004418

jvn.jp/en/vu/JVNVU94514762/index.html

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.9%

JSON

Related for CVE-2022-44620

nvd1 prion1 cvelist1