CVE-2022-22986

Netcommunity OG410X and OG810X series (Netcommunity OG410Xa, OG410Xi, OG810Xa, and OG810Xi firmware Ver.2.28 and earlier) allow an attacker on the adjacent network to execute an arbitrary OS command via a specially crafted config file.

Score

CVSS 3.1 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2022-03-31

Last modified

2024-08-03

Weaknesses

CWE-78

Affected products

• Netcommunity Og410x And Og810x Series (Nippon Telegraph And Telephone East Corporation Ntt East And Nippon Telegraph And Telephone West Corporation Ntt West)
• Og410xa Firmware (Ntt-east)
• Og410xi Firmware (Ntt-east)
• Og810xa Firmware (Ntt-east)
• Og810xi Firmware (Ntt-east)

References

• https://business.ntt-east.co.jp/topics/2022/03_22.html
• https://jvn.jp/en/vu/JVNVU94900322/index.html
• https://www.ntt-west.co.jp/smb/kiki_info/info/220322.html