CVE-2022-25621
Critical
Description
UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, UNIVERGE WA WA2612-AP Ver8.2.11 and prior allows a remote attacker to execute arbitrary OS commands.
SeverityCritical
CVSS9.8
Exploit probability—
ProductNec Univerge Wa1020 Firmware
PublishedMar 11, 2022
First seenMar 11, 2022
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nec univerge_wa1020_firmware | v ≤ 8.2.11 | — |
| nec univerge_wa1510_firmware | v ≤ 8.2.11 | — |
| nec univerge_wa1511_firmware | v ≤ 8.2.11 | — |
| nec univerge_wa1512_firmware | v ≤ 8.2.11 | — |
| nec univerge_wa2020_firmware | v ≤ 8.2.11 | — |
| nec univerge_wa2021_firmware | v ≤ 8.2.11 | — |
| nec univerge_wa2610-ap_firmware | v ≤ 8.2.11 | — |
| nec univerge_wa2611-ap_firmware | v ≤ 8.2.11 | — |
| nec univerge_wa2611e-ap_firmware | v ≤ 8.2.11 | — |
| nec univerge_wa2612-ap_firmware | v ≤ 8.2.11 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.