What’s Vulnerable › Vulnerabilities
CVE-2022-25621
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-03-11 · updated 2026-06-17
- Weakness: CWE-78
Description
UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, UNIVERGE WA WA2612-AP Ver8.2.11 and prior allows a remote attacker to execute arbitrary OS commands.
Affected products
- NEC Univerge Wa1020 Firmware: through 8.2.11
- NEC Univerge Wa1510 Firmware: through 8.2.11
- NEC Univerge Wa1511 Firmware: through 8.2.11
- NEC Univerge Wa1512 Firmware: through 8.2.11
- NEC Univerge Wa2020 Firmware: through 8.2.11
- NEC Univerge Wa2021 Firmware: through 8.2.11
- NEC Univerge Wa2610-Ap Firmware: through 8.2.11
- NEC Univerge Wa2611-Ap Firmware: through 8.2.11
- NEC Univerge Wa2611E-Ap Firmware: through 8.2.11
- NEC Univerge Wa2612-Ap Firmware: through 8.2.11
References
- https://jpn.nec.com/security-info/secinfo/nv22-004_en.html
- https://jpn.nec.com/security-info/secinfo/nv22-004_en.html
Get alerted when CVE-2022-25621 or the next vulnerability affects your stack