CVE-2022-25621: OS Command Injection
First published: Fri Mar 11 2022(Updated: )
UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, UNIVERGE WA WA2612-AP Ver8.2.11 and prior allows a remote attacker to execute arbitrary OS commands.
Credit: psirt-info@cyber.jp.nec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nec Univerge Wa1020 Firmware | <=8.2.11 | |
| Nec Univerge Wa1020 | ||
| Nec Univerge Wa1510 Firmware | <=8.2.11 | |
| Nec Univerge Wa1510 | ||
| Nec Univerge Wa1511 Firmware | <=8.2.11 | |
| Nec Univerge Wa1511 | ||
| Nec Univerge Wa1512 Firmware | <=8.2.11 | |
| Nec Univerge Wa1512 | ||
| Nec Univerge Wa2020 Firmware | <=8.2.11 | |
| Nec Univerge Wa2020 | ||
| Nec Univerge Wa2021 Firmware | <=8.2.11 | |
| Nec Univerge Wa2021 | ||
| Nec Univerge Wa2610-ap Firmware | <=8.2.11 | |
| Nec Univerge Wa2610-ap | ||
| Nec Univerge Wa2611-ap Firmware | <=8.2.11 | |
| Nec Univerge Wa2611-ap | ||
| Nec Univerge Wa2611e-ap Firmware | <=8.2.11 | |
| Nec Univerge Wa2611e-ap | ||
| Nec Univerge Wa2612-ap Firmware | <=8.2.11 | |
| Nec Univerge Wa2612-ap |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-25621?
The severity of CVE-2022-25621 is critical with a CVSS score of 9.8.
Which software versions are affected by CVE-2022-25621?
UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, and UNIVERGE WA 2612-AP Ver8.2.11 and prior are affected by CVE-2022-25621.
How can I fix CVE-2022-25621?
To fix CVE-2022-25621, it is recommended to update the affected UUNIVERGE and UNIVERGE software versions to a version higher than 8.2.11.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-25621?
The Common Weakness Enumeration (CWE) ID for CVE-2022-25621 is CWE-78.
Where can I find more information about CVE-2022-25621?
You can find more information about CVE-2022-25621 at the following reference link: [CVE-2022-25621 Reference](https://jpn.nec.com/security-info/secinfo/nv22-004_en.html).
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/weakness
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nec
- canonical/nec univerge wa1020 firmware
- version/nec univerge wa1020 firmware/8.2.11
- canonical/nec univerge wa1020
- canonical/nec univerge wa1510 firmware
- version/nec univerge wa1510 firmware/8.2.11
- canonical/nec univerge wa1510
- canonical/nec univerge wa1511 firmware
- version/nec univerge wa1511 firmware/8.2.11
- canonical/nec univerge wa1511
- canonical/nec univerge wa1512 firmware
- version/nec univerge wa1512 firmware/8.2.11
- canonical/nec univerge wa1512
- canonical/nec univerge wa2020 firmware
- version/nec univerge wa2020 firmware/8.2.11
- canonical/nec univerge wa2020
- canonical/nec univerge wa2021 firmware
- version/nec univerge wa2021 firmware/8.2.11
- canonical/nec univerge wa2021
- canonical/nec univerge wa2610-ap firmware
- version/nec univerge wa2610-ap firmware/8.2.11
- canonical/nec univerge wa2610-ap
- canonical/nec univerge wa2611-ap firmware
- version/nec univerge wa2611-ap firmware/8.2.11
- canonical/nec univerge wa2611-ap
- canonical/nec univerge wa2611e-ap firmware
- version/nec univerge wa2611e-ap firmware/8.2.11
- canonical/nec univerge wa2611e-ap
- canonical/nec univerge wa2612-ap firmware
- version/nec univerge wa2612-ap firmware/8.2.11
- canonical/nec univerge wa2612-ap