CVE-2022-26834: High severity rakuten casa vulnerability
Published Jun 13, 2022
·Updated
Improper access control vulnerability in Rakuten Casa version APFV141 or APFV200 allows a remote attacker to obtain the information stored in the product because the product is set to accept HTTP connections from the WAN side by default.
Affected Software
2 affected components
Rakuten Casa=ap_f_v1_4_1
Rakuten Casa=ap_f_v2_0_0
Event History
Jun 13, 2022
CVE Published
via MITRE·04:50 AM
Data Sourced
via MITRE·04:50 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2022-26834?
CVE-2022-26834 is an improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0.
2
How does CVE-2022-26834 impact the product?
CVE-2022-26834 allows a remote attacker to obtain information stored in the product due to improper access control settings.
3
Which versions of Rakuten Casa are affected by CVE-2022-26834?
CVE-2022-26834 affects Rakuten Casa version AP_F_V1_4_1 and AP_F_V2_0_0.
4
What is the severity of CVE-2022-26834?
CVE-2022-26834 has a severity rating of 7.5 (High).
5
How can I fix CVE-2022-26834?
To fix CVE-2022-26834, update Rakuten Casa to a version that addresses the improper access control vulnerability.