PT-2022-14902 · Elecom · Elecom Lan Routers

Toshitsugu Yoneyama · Published 2022-02-08 · Updated 2023-08-08 · CVE-2022-21173

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ELECOM LAN routers versions 1.05 and earlier

Description The issue allows an attacker on the adjacent network to execute an arbitrary OS command via unspecified vectors.

Recommendations For versions 1.05 and earlier, update the firmware to a version later than 1.05 to resolve the issue.

Fix

Related Identifiers

CVE-2022-21173

Affected Products

Elecom Lan Routers

References · 6

• https://elecom.co.jp/news/security/20220208-02 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21173 · Security Note
• https://t.me/cvenotify/26429 · Telegram Post
• https://jvn.jp/en/jp/JVN17482543/index.html · Note
• https://t.me/cibsecurity/36991 · Telegram Post