CVE-2022-3703: All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide…

PriorityP261critical10CVSS 3.1

AVNACLPRNUINSCCHIHAH

EPSS

0.29%

20.6th percentile

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
etic_telecom	remote_access_server	<= 4.5.0	—
etictelecom	remote_access_server_firmware	<= 4.5.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.