CVE-2022-28704

 

Published at: - 13-06-2022 07:15

Last modified: - 22-06-2022 04:25

Total changes: - 3

Description

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is in its default settings in which is set to accept SSH connections from the WAN side, and is also connected to the Internet with the authentication information unchanged from the default settings.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://jvn.jp/en/jp/JVN46892984/index.html
• https://network.mobile.rakuten.co.jp/information/news/product/1033/

 

Keywords

NVD

 

CVE-2022-28704

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures