Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2021-37384
HistoryJul 17, 2023 - 12:00 a.m.

CVE-2021-37384

2023-07-1700:00:00
mitre
github.com
1
cve-2021-37384
remote code execution
furukawa onu
web interface
unauthenticated users

AI Score

7.5

Confidence

Low

EPSS

0.007

Percentile

80.6%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:furukawa:ld420-10r_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "furukawa",
    "product": "ld420-10r_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.4.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:furukawa:ld421-21w_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "furukawa",
    "product": "ld421-21w_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.5.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:furukawa:ld421-21wv_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "furukawa",
    "product": "ld421-21wv_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.5.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:furukawa:423-41w\\/ac_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "furukawa",
    "product": "423-41w\\/ac_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.2.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

AI Score

7.5

Confidence

Low

EPSS

0.007

Percentile

80.6%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

Related for VULNRICHMENT:CVE-2021-37384