CVE-2022-29525

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-13 · updated 2026-06-17
Weakness: CWE-798

Description

Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation.

Affected products

Rakuten Mobile, Inc. Rakuten Casa: ap_f_v1_4_1, ap_f_v2_0_0

References

https://jvn.jp/en/jp/JVN46892984/index.html
https://network.mobile.rakuten.co.jp/information/news/product/1033/
https://jvn.jp/en/jp/JVN46892984/index.html
https://network.mobile.rakuten.co.jp/information/news/product/1033/

Get alerted when CVE-2022-29525 or the next vulnerability affects your stack