CVEvulnerability

CVE-2022-25621

9.8 CRITICAL Published 2022-03-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-78

Description

UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, UNIVERGE WA WA2612-AP Ver8.2.11 and prior allows a remote attacker to execute arbitrary OS commands.

Affected configurations

• nec univerge wa1020 firmware (<= 8.2.11) • nec univerge wa1510 firmware (<= 8.2.11) • nec univerge wa1511 firmware (<= 8.2.11) • nec univerge wa1512 firmware (<= 8.2.11) • nec univerge wa2020 firmware (<= 8.2.11) • nec univerge wa2021 firmware (<= 8.2.11) • nec univerge wa2610-ap firmware (<= 8.2.11) • nec univerge wa2611-ap firmware (<= 8.2.11) • nec univerge wa2611e-ap firmware (<= 8.2.11) • nec univerge wa2612-ap firmware (<= 8.2.11)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References