Lucene search

Japan Vulnerability NotesJVN:17625382

HistoryJul 29, 2022 - 12:00 a.m.

JVN#17625382: Multiple vulnerabilities in Nintendo Wi-Fi Network Adaptor WAP-001

2022-07-2900:00:00

Japan Vulnerability Notes

jvn.jp

nintendo wi-fi network

adaptor wap-001

os command injection

buffer overflow

cve-2022-36381

cve-2022-36293

product discontinuation

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

45.4%

JSON

Nintendo Wi-Fi Network Adaptor provided by Nintendo Co.,Ltd. contains multiple vulnerabilities listed below.

OS command injection (CWE-78) - CVE-2022-36381

Version	Vector	Score
CVSS v3	CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	Base Score: 6.8
CVSS v2	AV:A/AC:L/Au:S/C:P/I:P/A:P	Base Score: 5.2

Buffer overflow (CWE-121) - CVE-2022-36293

Version	Vector	Score
CVSS v3	CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	Base Score: 6.8
CVSS v2	AV:A/AC:L/Au:S/C:P/I:P/A:P	Base Score: 5.2

Impact

A user who can access the administrative page of the product may execute an arbitrary OS command - CVE-2022-36381
A user who can access the administrative page of the product may execute an arbitrary code - CVE-2022-36293

Solution

Stop using the product
The developer states that the product is no longer supported, therefore recommends users to stop using the product.

Products Affected

Nintendo Wi-Fi Network Adaptor WAP-001 all versions

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

45.4%

JSON

Related for JVN:17625382