CVE-2022-25621: OS Command Injection
UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, UNIVERGE WA WA2612-AP Ver8.2.11 and prior allows a remote attacker to execute arbitrary OS commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-25621?
The severity of CVE-2022-25621 is critical with a CVSS score of 9.8.
Which software versions are affected by CVE-2022-25621?
UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, and UNIVERGE WA 2612-AP Ver8.2.11 and prior are affected by CVE-2022-25621.
How can I fix CVE-2022-25621?
To fix CVE-2022-25621, it is recommended to update the affected UUNIVERGE and UNIVERGE software versions to a version higher than 8.2.11.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-25621?
The Common Weakness Enumeration (CWE) ID for CVE-2022-25621 is CWE-78.
Where can I find more information about CVE-2022-25621?
You can find more information about CVE-2022-25621 at the following reference link: [CVE-2022-25621 Reference](https://jpn.nec.com/security-info/secinfo/nv22-004_en.html).