CVE-2022-29525: Critical severity rakuten casa vulnerability
Published Jun 13, 2022
·Updated
Rakuten Casa version APFV141 or APFV200 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation.
Affected Software
2 affected components
Rakuten Casa=ap_f_v1_4_1
Rakuten Casa=ap_f_v2_0_0
Event History
Jun 13, 2022
CVE Published
via MITRE·04:50 AM
Data Sourced
via MITRE·04:50 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-29525.
2
What is the severity of CVE-2022-29525?
The severity of CVE-2022-29525 is critical.
3
What is the affected software version of CVE-2022-29525?
The affected software versions of CVE-2022-29525 are AP_F_V1_4_1 and AP_F_V2_0_0.
4
How can an unauthenticated attacker exploit CVE-2022-29525?
An unauthenticated attacker can exploit CVE-2022-29525 by using the hard-coded credential to log in with root privileges and perform arbitrary operations.
5
Are there any references available for more information on CVE-2022-29525?
Yes, you can find more information on CVE-2022-29525 at the following references: - https://jvn.jp/en/jp/JVN46892984/index.html - https://network.mobile.rakuten.co.jp/information/news/product/1033/