PT-2022-17415 · Nec · Univerge Wa 2611-Ap+8

Published 2022-03-11 · Updated 2022-03-22 · CVE-2022-25621

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions UNIVERGE WA 1020 versions 8.2.11 and prior UNIVERGE WA 1510 versions 8.2.11 and prior UNIVERGE WA 1511 versions 8.2.11 and prior UNIVERGE WA 1512 versions 8.2.11 and prior UNIVERGE WA 2020 versions 8.2.11 and prior UNIVERGE WA 2021 versions 8.2.11 and prior UNIVERGE WA 2610-AP versions 8.2.11 and prior UNIVERGE WA 2611-AP versions 8.2.11 and prior UNIVERGE WA 2611E-AP versions 8.2.11 and prior UNIVERGE WA 2612-AP versions 8.2.11 and prior

Description The issue allows a remote attacker to execute arbitrary OS commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-25621

Affected Products

Univerge Wa 1020

Univerge Wa 1510

Univerge Wa 1511

Univerge Wa 1512

Univerge Wa 2020

Univerge Wa 2021

Univerge Wa 2610-Ap

Univerge Wa 2611-Ap

Univerge Wa 2612-Ap

References · 4

• https://jpn.nec.com/security-info/secinfo/nv22-004_en.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25621 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25621 · Vendor Advisory
• https://t.me/cibsecurity/38811 · Telegram Post