CVE-2022-29516

published 2022-05-18

CVE-2022-29516: The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 NW(1100…

Priority P2 64 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 NW(1100, 3200, 3500), IPCOM EX2 DC, IPCOM EX2 DC, IPCOM EX IN(2300, 2500, 2700), IPCOM EX LB(1100, 1300, 2300, 2500, 2700), IPCOM EX SC(1100, 1300, 2300, 2500, 2700), and IPCOM EX NW(1100, 1300, 2300, 2500, 2700)) allows a remote attacker to execute an arbitrary OS command via unspecified vectors.

Affected

46 ranges · showing 25

Vendor	Product	Version range	Fixed in
fujitsu	ipcom_ex2_dc_3200_firmware	< v02l21_nf0201	v02l21_nf0201
fujitsu	ipcom_ex2_dc_3500_firmware	< v02l21_nf0201	v02l21_nf0201
fujitsu	ipcom_ex2_in_1100_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_in_3200_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_in_3500_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_lb_1100_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_lb_3200_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_lb_3500_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_nw_1100_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_nw_3200_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_nw_3500_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_sc_1100_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_sc_3200_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex2_sc_3500_firmware	< v01l05_nf0501	v01l05_nf0501
fujitsu	ipcom_ex_in_2300_firmware	< e20l33_nf1101	e20l33_nf1101
fujitsu	ipcom_ex_in_2500_firmware	< e20l33_nf1101	e20l33_nf1101
fujitsu	ipcom_ex_in_2700_firmware	< e20l33_nf1101	e20l33_nf1101
fujitsu	ipcom_ex_lb_1100_firmware	< e20l33_nf1101	e20l33_nf1101
fujitsu	ipcom_ex_lb_1300_firmware	< e20l33_nf1101	e20l33_nf1101
fujitsu	ipcom_ex_lb_2300_firmware	< e20l33_nf1101	e20l33_nf1101
fujitsu	ipcom_ex_lb_2500_firmware	< e20l33_nf1101	e20l33_nf1101
fujitsu	ipcom_ex_lb_2700_firmware	< e20l33_nf1101	e20l33_nf1101
fujitsu	ipcom_ex_nw_1100_firmware	< e20l33_nf1101	e20l33_nf1101
fujitsu	ipcom_ex_nw_1300_firmware	< e20l33_nf1101	e20l33_nf1101
fujitsu	ipcom_ex_nw_2300_firmware	< e20l33_nf1101	e20l33_nf1101

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78