CVE-2022-44606

OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
jpcertCNA
---
---
CVEADP
---
---
CISA-ADPADP
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
VendorProductVersion
unimoudr-ja1604_firmware
𝑥
< 71x10.1.107114.43a
unimoudr-ja1608_firmware
𝑥
< 71x10.1.107114.43a
unimoudr-ja1616_firmware
𝑥
< 71x10.1.107114.43a
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.unimo.co.jp/table_notice/index.php?act=1&resid=1666831567-004418
https://jvn.jp/en/vu/JVNVU94514762/index.html
http://www.unimo.co.jp/table_notice/index.php?act=1&resid=1666831567-004418
https://jvn.jp/en/vu/JVNVU94514762/index.html