CVE-2022-25621

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2.11 and prior, UNIVERGE WA 2611E-AP Ver8.2.11 and prior, UNIVERGE WA WA2612-AP Ver8.2.11 and prior allows a remote attacker to execute arbitrary OS commands.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Mar 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-256227.5The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the mi CVE-2022-256237.8The Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low privilege local account can be elevated to the S CVE-2022-256258.8A malicious unauthorized PAM user can access the administration configuration data and change the values.CVE-2022-256265.3An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to c CVE-2022-256276.7An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Sy CVE-2022-256288.8An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4 CVE-2022-256295.4An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be execute CVE-2022-25634.8The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege users such as admin to CVE-2022-256305.4An authenticated user can embed malicious content with XSS into the admin group policy page.CVE-2022-256317.8Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnerability, which is a t CVE-2022-256347.5Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.CVE-2022-256356.5Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet len