CVE-2022-25621

Published: Mar 11, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, UNIVERGE WA WA2612-AP Ver8.2.11 and prior allows a remote attacker to execute arbitrary OS commands.

Affected (10)

Products: Nec: Univerge Wa1020 Firmware, Univerge Wa1510 Firmware, Univerge Wa1511 Firmware, Univerge Wa1512 Firmware, Univerge Wa2020 Firmware, Univerge Wa2021 Firmware, Univerge Wa2610 Ap Firmware, Univerge Wa2611 Ap Firmware, Univerge Wa2611e Ap Firmware, Univerge Wa2612 Ap Firmware

Nec

10 products

Univerge Wa1020 Firmware

Univerge Wa1510 Firmware

Univerge Wa1511 Firmware

Univerge Wa1512 Firmware

Univerge Wa2020 Firmware

Univerge Wa2021 Firmware

Univerge Wa2610 Ap Firmware

Univerge Wa2611 Ap Firmware

Univerge Wa2611e Ap Firmware

Univerge Wa2612 Ap Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Univerge Wa1020 Firmware	Up to 8.2.11

Running on/with	Platform Versions
Nec Univerge Wa1020	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Univerge Wa1510 Firmware	Up to 8.2.11

Running on/with	Platform Versions
Nec Univerge Wa1510	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Univerge Wa1511 Firmware	Up to 8.2.11

Running on/with	Platform Versions
Nec Univerge Wa1511	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Univerge Wa1512 Firmware	Up to 8.2.11

Running on/with	Platform Versions
Nec Univerge Wa1512	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Univerge Wa2020 Firmware	Up to 8.2.11

Running on/with	Platform Versions
Nec Univerge Wa2020	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Univerge Wa2021 Firmware	Up to 8.2.11

Running on/with	Platform Versions
Nec Univerge Wa2021	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Univerge Wa2610 Ap Firmware	Up to 8.2.11

Running on/with	Platform Versions
Nec Univerge Wa2610 Ap	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Univerge Wa2611 Ap Firmware	Up to 8.2.11

Running on/with	Platform Versions
Nec Univerge Wa2611 Ap	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Univerge Wa2611e Ap Firmware	Up to 8.2.11

Running on/with	Platform Versions
Nec Univerge Wa2611e Ap	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nec Univerge Wa2612 Ap Firmware	Up to 8.2.11

Running on/with	Platform Versions
Nec Univerge Wa2612 Ap	All versions

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

https://jpn.nec.com/security-info/secinfo/nv22-004_en.html

Source: psirt-info@cyber.jp.nec.com

Vendor Advisory

https://jpn.nec.com/security-info/secinfo/nv22-004_en.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.