critical9.8
CVE-2021-37384
RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary comma…
Impact
RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Furukawa | 423-41w\/Ac Firmware | before 1.2.0 |
| Furukawa | Ld421-21w Firmware | before 1.5.0 |
| Furukawa | Ld420-10r Firmware | before 1.4.0 |
| Furukawa | Ld421-21wv Firmware | before 1.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cwe.mitre.org/data/definitions/94.html
- https://gist.githubusercontent.com/LuigiPolidorio/9fe61cf2edee63152161ffc52c39f6cd/raw/529cf49103e0fdf4eeb970fa1f62fa508ebe7c3c/reference.txt
- https://owasp.org/www-community/attacks/Code_Injection
- https://www.softwall.com.br/cves/publicacao-rce-html-injection-furukawa/
- https://cwe.mitre.org/data/definitions/94.html
- https://gist.githubusercontent.com/LuigiPolidorio/9fe61cf2edee63152161ffc52c39f6cd/raw/529cf49103e0fdf4eeb970fa1f62fa508ebe7c3c/reference.txt
- https://owasp.org/www-community/attacks/Code_Injection
- https://www.softwall.com.br/cves/publicacao-rce-html-injection-furukawa/