CVEvulnerability

CVE-2021-37384

9.8 CRITICAL Published 2023-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-94

Description

RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface.

Affected configurations

• furukawa 423-41w\/ac firmware (< 1.2.0) • furukawa ld421-21w firmware (< 1.5.0) • furukawa ld420-10r firmware (< 1.4.0) • furukawa ld421-21wv firmware (< 1.5.0)

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References