CVE-2022-22986

2022-03-3107:20:41

jpcert

www.cve.org

cve-2022-22986

netcommunity og410x

netcommunity og810x

adjacent network

arbitrary os command

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

47.1%

JSON

Netcommunity OG410X and OG810X series (Netcommunity OG410Xa, OG410Xi, OG810Xa, and OG810Xi firmware Ver.2.28 and earlier) allow an attacker on the adjacent network to execute an arbitrary OS command via a specially crafted config file.

CNA Affected

[
  {
    "product": "Netcommunity OG410X and OG810X series",
    "vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION (NTT East) and NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION (NTT West)",
    "versions": [
      {
        "status": "affected",
        "version": "Netcommunity OG410Xa, OG410Xi, OG810Xa and OG810Xi firmware Ver.2.28 and earlier"
      }
    ]
  }
]