CVE-2022-25915

CVE-2022-25915: falha em ELECOM LAN routers

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ELECOM LAN routers

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.4%
Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors.
Produtos afetados
ELECOM CO.,LTD. · ELECOM LAN routers
CVEs relacionadas — ELECOM LAN routers

No mesmo produto, das mais perigosas para as menos.

CVE-2020-5634—CVE-2020-5634EPSS 0.6%CVE-2021-20856—CVE-2021-20856EPSS 0.6%CVE-2021-20855—CVE-2021-20855EPSS 0.6%CVE-2021-20859—CVE-2021-20859EPSS 0.6%CVE-2021-20860—CVE-2021-20860EPSS 0.6%CVE-2021-20852—CVE-2021-20852EPSS 0.5%