CVE-2022-35733

Katalog CVE

CVSS 9.8 · Critical EPSS 1,6%

Kerentanan Missing Authentication for Critical Function pada unimo udr-ja1004 firmware, unimo udr-ja1008 firmware +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.

Rincian

Terbit di NVD

23 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 74,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.unimo.co.jp/table_notice/index.php?act=1&resid=1643590226-637355 advisory vendor
• https://jvn.jp/en/vu/JVNVU90821877/index.html advisory pihak ketiga