What’s Vulnerable › Vulnerabilities

CVE-2022-22986

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-31 · updated 2026-06-17
• Weakness: CWE-78

Description

Netcommunity OG410X and OG810X series (Netcommunity OG410Xa, OG410Xi, OG810Xa, and OG810Xi firmware Ver.2.28 and earlier) allow an attacker on the adjacent network to execute an arbitrary OS command via a specially crafted config file.

Affected products

• Ntt-East Og410Xa Firmware: through 2.28
• Ntt-East Og410Xi Firmware: through 2.28
• Ntt-East Og810Xa Firmware: through 2.28
• Ntt-East Og810Xi Firmware: through 2.28

References

• https://business.ntt-east.co.jp/topics/2022/03_22.html
• https://jvn.jp/en/vu/JVNVU94900322/index.html
• https://www.ntt-west.co.jp/smb/kiki_info/info/220322.html
• https://business.ntt-east.co.jp/topics/2022/03_22.html
• https://jvn.jp/en/vu/JVNVU94900322/index.html
• https://www.ntt-west.co.jp/smb/kiki_info/info/220322.html

Get alerted when CVE-2022-22986 or the next vulnerability affects your stack