JVN#80476232: SR-7100VN vulnerable to privilege escalation

SR-7100VN provided by ICOM INCORPORATED contains a privilege escalation vulnerability (CWE-268).

Impact

A user with an administrator privilege of the product may obtain administrative privileges of the OS (Operating System). As a result, an arbitrary OS command may be executed by the user.

Solution

Update the Firmware
Update the firmware according to the information provided by the developer.
The developer states that the vulnerability was fixed in the following versions:

• SR-7100VN firmware Ver.1.39(N)
• SR-7100VN #31 firmware Ver.1.22

Products Affected

• SR-7100VN firmware Ver.1.38(N) and earlier
• SR-7100VN #31 firmware Ver.1.21 and earlier