RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface.
References
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
History
01 Aug 2024, 13:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 |
16 May 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface. |
22 Aug 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Aug 2023, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A remote command execution (RCE) vulnerability in the web interface component of Furukawa Electric LatAM 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 allows unauthenticated attackers to send arbitrary commands to the device via unspecified vectors. |
28 Jul 2023, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://gist.githubusercontent.com/LuigiPolidorio/9fe61cf2edee63152161ffc52c39f6cd/raw/529cf49103e0fdf4eeb970fa1f62fa508ebe7c3c/reference.txt - Third Party Advisory | |
| References | (MISC) https://owasp.org/www-community/attacks/Code_Injection - Not Applicable | |
| References | (MISC) https://cwe.mitre.org/data/definitions/94.html - Not Applicable | |
| CWE | NVD-CWE-noinfo | |
| First Time |
Furukawa ld421-21wv
Furukawa 423-41w\/ac Furukawa ld421-21wv Firmware Furukawa ld420-10r Furukawa ld421-21w Furukawa ld420-10r Firmware Furukawa Furukawa ld421-21w Firmware Furukawa 423-41w\/ac Firmware |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:o:furukawa:ld421-21w_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:furukawa:ld421-21wv:-:*:*:*:*:*:*:* cpe:2.3:o:furukawa:423-41w\/ac_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:furukawa:ld420-10r_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:furukawa:ld421-21wv_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:furukawa:ld420-10r:-:*:*:*:*:*:*:* cpe:2.3:h:furukawa:ld421-21w:-:*:*:*:*:*:*:* cpe:2.3:h:furukawa:423-41w\/ac:-:*:*:*:*:*:*:* |
17 Jul 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-17 21:15
Updated : 2024-08-01 13:42
NVD link : CVE-2021-37384
Mitre link : CVE-2021-37384
CVE.ORG link : CVE-2021-37384
JSON object : View
Products Affected
furukawa
- ld420-10r_firmware
- 423-41w\/ac_firmware
- 423-41w\/ac
- ld421-21wv_firmware
- ld421-21w
- ld421-21w_firmware
- ld421-21wv
- ld420-10r
CWE