High severity · published Mar 31, 2022
CVE-2022-22986
Netcommunity OG410X and OG810X series (Netcommunity OG410Xa, OG410Xi, OG810Xa, and OG810Xi firmware Ver.2.28 and earlier) allow an attacker on the adjacent network to execute an…
8.8
CVSS
0.7%
EPSS
No
On KEV
Description
Netcommunity OG410X and OG810X series (Netcommunity OG410Xa, OG410Xi, OG810Xa, and OG810Xi firmware Ver.2.28 and earlier) allow an attacker on the adjacent network to execute an arbitrary OS command via a specially crafted config file.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NO
Netcommunity OG410X and OG810X series · NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION (NTT East) and NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION (NTT West)
Netcommunity OG410Xa, OG410Xi, OG810Xa and OG810Xi firmware Ver.2.28 and earlier · source: vendor
OF
Og410xa Firmware · Ntt-east
through 2.28 · source: NVD
OF
Og410xi Firmware · Ntt-east
through 2.28 · source: NVD
OF
Og810xa Firmware · Ntt-east
through 2.28 · source: NVD
OF
Og810xi Firmware · Ntt-east
through 2.28 · source: NVD
Affected product
NO
Netcommunity OG410X and OG810X series
NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION (NTT East) and NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION (NTT West)
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-22986
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-22986
Vendor Advisory
https://business.ntt-east.co.jp/topics/2022/03_22.html
Third Party Advisory
https://jvn.jp/en/vu/JVNVU94900322/index.html
Vendor Advisory
https://www.ntt-west.co.jp/smb/kiki_info/info/220322.html