8.8

CVE-2022-25915

Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Elecom ≫ Wrc-1167gst2 Firmware Version <= 1.25
   Elecom ≫ Wrc-1167gst2 Version-
Elecom ≫ Wrc-1167gst2a Firmware Version <= 1.25
   Elecom ≫ Wrc-1167gst2a Version-
Elecom ≫ Wrc-1167gst2h Firmware Version <= 1.25
   Elecom ≫ Wrc-1167gst2h Version-
Elecom ≫ Wrc-2533gs2-b Firmware Version <= 1.52
   Elecom ≫ Wrc-2533gs2-b Version-
Elecom ≫ Wrc-2533gs2-w Firmware Version <= 1.52
   Elecom ≫ Wrc-2533gs2-w Version-
Elecom ≫ Wrc-1750gs Firmware Version <= 1.03
   Elecom ≫ Wrc-1750gs Version-
Elecom ≫ Wrc-1750gsv Firmware Version <= 2.11
   Elecom ≫ Wrc-1750gsv Version-
Elecom ≫ Wrc-1900gst Firmware Version <= 1.03
   Elecom ≫ Wrc-1900gst Version-
Elecom ≫ Wrc-2533gst Firmware Version <= 1.03
   Elecom ≫ Wrc-2533gst Version-
Elecom ≫ Wrc-2533gst2 Firmware Version <= 1.25
   Elecom ≫ Wrc-2533gst2 Version-
Elecom ≫ Wrc-2533gsta Firmware Version <= 1.03
   Elecom ≫ Wrc-2533gsta Version-
Elecom ≫ Wrc-2533gst2sp Firmware Version <= 1.25
   Elecom ≫ Wrc-2533gst2sp Version-
Elecom ≫ Wrc-2533gst2-g Firmware Version <= 1.25
   Elecom ≫ Wrc-2533gst2-g Version-
Elecom ≫ Edwrc-2533gst2 Firmware Version <= 1.25
   Elecom ≫ Edwrc-2533gst2 Version-
Elecom ≫ Wrc-1167gs2-b Firmware Version <= 1.65
   Elecom ≫ Wrc-1167gs2-b Version-
Elecom ≫ Wrc-1167gs2h-b Firmware Version <= 1.65
   Elecom ≫ Wrc-1167gs2h-b Version-
Elecom ≫ Wmc-dlgst2-w Firmware Version <= 1.24
   Elecom ≫ Wmc-dlgst2-w Version-
Elecom ≫ Wmc-m1267gst2-w Firmware Version <= 1.24
   Elecom ≫ Wmc-m1267gst2-w Version-
Elecom ≫ Wmc-2hc-w Firmware Version <= 1.24
   Elecom ≫ Wmc-2hc-w Version-
Elecom ≫ Wmc-c2533gst-w Firmware Version <= 1.24
   Elecom ≫ Wmc-c2533gst-w Version-
Elecom ≫ Wrc-1900gst2 Firmware Version <= 1.15
   Elecom ≫ Wrc-1900gst2 Version-
Elecom ≫ Wrc-1900gst2sp Firmware Version <= 1.15
   Elecom ≫ Wrc-1900gst2sp Version-
Elecom ≫ Wrc-1750gst2 Firmware Version <= 1.14
   Elecom ≫ Wrc-1750gst2 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.374
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://jvn.jp/en/jp/JVN88993473/
Third Party Advisory