CVE-2022-25915
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors.
Una vulnerabilidad de control de acceso inapropiado en los routers LAN de ELECOM (versiones de firmware WRC-1167GST2 v1.25 y anteriores, versiones de firmware WRC-1167GST2A v1.25 y anteriores, versiones de firmware WRC-1167GST2H v1.25 y anteriores, versiones de firmware WRC-2533GS2-B v1. 52 y anteriores, WRC-2533GS2-W versiones de firmware v1.52 y anteriores, WRC-1750GS versiones de firmware v1.03 y anteriores, WRC-1750GSV versiones de firmware v2.11 y anteriores, WRC-1900GST versiones de firmware v1.03 y anteriores, WRC-2533GST versiones de firmware v1. 03 y anteriores, WRC-2533GSTA versiones de firmware v1.03 y anteriores, WRC-2533GST2 versiones de firmware v1.25 y anteriores, WRC-2533GST2SP versiones de firmware v1.25 y anteriores, WRC-2533GST2-G versiones de firmware v1.25 y anteriores, y EDWRC-2533GST2 versiones de firmware v1.25 y anteriores) permite a un atacante autenticado adyacente a la red omitir la restricción de acceso y acceder a la pantalla de administración del producto por medio de vectores no especificados
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-03-10 CVE Reserved
- 2022-03-31 CVE Published
- 2023-10-22 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/en/jp/JVN88993473 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.elecom.co.jp/news/security/20211130-01 | 2023-08-08 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Elecom Search vendor "Elecom" | Wrc-1167gst2 Firmware Search vendor "Elecom" for product "Wrc-1167gst2 Firmware" | <= 1.25 Search vendor "Elecom" for product "Wrc-1167gst2 Firmware" and version " <= 1.25" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1167gst2 Search vendor "Elecom" for product "Wrc-1167gst2" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1167gst2a Firmware Search vendor "Elecom" for product "Wrc-1167gst2a Firmware" | <= 1.25 Search vendor "Elecom" for product "Wrc-1167gst2a Firmware" and version " <= 1.25" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1167gst2a Search vendor "Elecom" for product "Wrc-1167gst2a" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1167gst2h Firmware Search vendor "Elecom" for product "Wrc-1167gst2h Firmware" | <= 1.25 Search vendor "Elecom" for product "Wrc-1167gst2h Firmware" and version " <= 1.25" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1167gst2h Search vendor "Elecom" for product "Wrc-1167gst2h" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-2533gs2-b Firmware Search vendor "Elecom" for product "Wrc-2533gs2-b Firmware" | <= 1.52 Search vendor "Elecom" for product "Wrc-2533gs2-b Firmware" and version " <= 1.52" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-2533gs2-b Search vendor "Elecom" for product "Wrc-2533gs2-b" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-2533gs2-w Firmware Search vendor "Elecom" for product "Wrc-2533gs2-w Firmware" | <= 1.52 Search vendor "Elecom" for product "Wrc-2533gs2-w Firmware" and version " <= 1.52" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-2533gs2-w Search vendor "Elecom" for product "Wrc-2533gs2-w" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1750gs Firmware Search vendor "Elecom" for product "Wrc-1750gs Firmware" | <= 1.03 Search vendor "Elecom" for product "Wrc-1750gs Firmware" and version " <= 1.03" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1750gs Search vendor "Elecom" for product "Wrc-1750gs" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1750gsv Firmware Search vendor "Elecom" for product "Wrc-1750gsv Firmware" | <= 2.11 Search vendor "Elecom" for product "Wrc-1750gsv Firmware" and version " <= 2.11" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1750gsv Search vendor "Elecom" for product "Wrc-1750gsv" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1900gst Firmware Search vendor "Elecom" for product "Wrc-1900gst Firmware" | <= 1.03 Search vendor "Elecom" for product "Wrc-1900gst Firmware" and version " <= 1.03" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1900gst Search vendor "Elecom" for product "Wrc-1900gst" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-2533gst Firmware Search vendor "Elecom" for product "Wrc-2533gst Firmware" | <= 1.03 Search vendor "Elecom" for product "Wrc-2533gst Firmware" and version " <= 1.03" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-2533gst Search vendor "Elecom" for product "Wrc-2533gst" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-2533gst2 Firmware Search vendor "Elecom" for product "Wrc-2533gst2 Firmware" | <= 1.25 Search vendor "Elecom" for product "Wrc-2533gst2 Firmware" and version " <= 1.25" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-2533gst2 Search vendor "Elecom" for product "Wrc-2533gst2" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-2533gsta Firmware Search vendor "Elecom" for product "Wrc-2533gsta Firmware" | <= 1.03 Search vendor "Elecom" for product "Wrc-2533gsta Firmware" and version " <= 1.03" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-2533gsta Search vendor "Elecom" for product "Wrc-2533gsta" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-2533gst2sp Firmware Search vendor "Elecom" for product "Wrc-2533gst2sp Firmware" | <= 1.25 Search vendor "Elecom" for product "Wrc-2533gst2sp Firmware" and version " <= 1.25" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-2533gst2sp Search vendor "Elecom" for product "Wrc-2533gst2sp" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-2533gst2-g Firmware Search vendor "Elecom" for product "Wrc-2533gst2-g Firmware" | <= 1.25 Search vendor "Elecom" for product "Wrc-2533gst2-g Firmware" and version " <= 1.25" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-2533gst2-g Search vendor "Elecom" for product "Wrc-2533gst2-g" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Edwrc-2533gst2 Firmware Search vendor "Elecom" for product "Edwrc-2533gst2 Firmware" | <= 1.25 Search vendor "Elecom" for product "Edwrc-2533gst2 Firmware" and version " <= 1.25" | - |
Affected
| in | Elecom Search vendor "Elecom" | Edwrc-2533gst2 Search vendor "Elecom" for product "Edwrc-2533gst2" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1167gs2-b Firmware Search vendor "Elecom" for product "Wrc-1167gs2-b Firmware" | <= 1.65 Search vendor "Elecom" for product "Wrc-1167gs2-b Firmware" and version " <= 1.65" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1167gs2-b Search vendor "Elecom" for product "Wrc-1167gs2-b" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1167gs2h-b Firmware Search vendor "Elecom" for product "Wrc-1167gs2h-b Firmware" | <= 1.65 Search vendor "Elecom" for product "Wrc-1167gs2h-b Firmware" and version " <= 1.65" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1167gs2h-b Search vendor "Elecom" for product "Wrc-1167gs2h-b" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wmc-dlgst2-w Firmware Search vendor "Elecom" for product "Wmc-dlgst2-w Firmware" | <= 1.24 Search vendor "Elecom" for product "Wmc-dlgst2-w Firmware" and version " <= 1.24" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wmc-dlgst2-w Search vendor "Elecom" for product "Wmc-dlgst2-w" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wmc-m1267gst2-w Firmware Search vendor "Elecom" for product "Wmc-m1267gst2-w Firmware" | <= 1.24 Search vendor "Elecom" for product "Wmc-m1267gst2-w Firmware" and version " <= 1.24" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wmc-m1267gst2-w Search vendor "Elecom" for product "Wmc-m1267gst2-w" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wmc-2hc-w Firmware Search vendor "Elecom" for product "Wmc-2hc-w Firmware" | <= 1.24 Search vendor "Elecom" for product "Wmc-2hc-w Firmware" and version " <= 1.24" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wmc-2hc-w Search vendor "Elecom" for product "Wmc-2hc-w" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wmc-c2533gst-w Firmware Search vendor "Elecom" for product "Wmc-c2533gst-w Firmware" | <= 1.24 Search vendor "Elecom" for product "Wmc-c2533gst-w Firmware" and version " <= 1.24" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wmc-c2533gst-w Search vendor "Elecom" for product "Wmc-c2533gst-w" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1900gst2 Firmware Search vendor "Elecom" for product "Wrc-1900gst2 Firmware" | <= 1.15 Search vendor "Elecom" for product "Wrc-1900gst2 Firmware" and version " <= 1.15" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1900gst2 Search vendor "Elecom" for product "Wrc-1900gst2" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1900gst2sp Firmware Search vendor "Elecom" for product "Wrc-1900gst2sp Firmware" | <= 1.15 Search vendor "Elecom" for product "Wrc-1900gst2sp Firmware" and version " <= 1.15" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1900gst2sp Search vendor "Elecom" for product "Wrc-1900gst2sp" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1750gst2 Firmware Search vendor "Elecom" for product "Wrc-1750gst2 Firmware" | <= 1.14 Search vendor "Elecom" for product "Wrc-1750gst2 Firmware" and version " <= 1.14" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1750gst2 Search vendor "Elecom" for product "Wrc-1750gst2" | - | - |
Safe
|