by Kastro
Paper/Archive/CVE-2022-35733

CVE-2022-35733

UNIMO Technology Co., Ltd UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016 — Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware…

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 77.1.771 × 2015.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.

Affected

ProductAffectedFixed inSource
UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refunimo.co.jp/table_notice/index.php?act=1&resid=1643590226-637355refjvn.jp/en/vu/JVNVU90821877/index.html