// For flags

CVE-2022-25915

 

Severity Score

8.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors.

Una vulnerabilidad de control de acceso inapropiado en los routers LAN de ELECOM (versiones de firmware WRC-1167GST2 v1.25 y anteriores, versiones de firmware WRC-1167GST2A v1.25 y anteriores, versiones de firmware WRC-1167GST2H v1.25 y anteriores, versiones de firmware WRC-2533GS2-B v1. 52 y anteriores, WRC-2533GS2-W versiones de firmware v1.52 y anteriores, WRC-1750GS versiones de firmware v1.03 y anteriores, WRC-1750GSV versiones de firmware v2.11 y anteriores, WRC-1900GST versiones de firmware v1.03 y anteriores, WRC-2533GST versiones de firmware v1. 03 y anteriores, WRC-2533GSTA versiones de firmware v1.03 y anteriores, WRC-2533GST2 versiones de firmware v1.25 y anteriores, WRC-2533GST2SP versiones de firmware v1.25 y anteriores, WRC-2533GST2-G versiones de firmware v1.25 y anteriores, y EDWRC-2533GST2 versiones de firmware v1.25 y anteriores) permite a un atacante autenticado adyacente a la red omitir la restricción de acceso y acceder a la pantalla de administración del producto por medio de vectores no especificados

*Credits: N/A
CVSS Scores
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Adjacent
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-03-10 CVE Reserved
  • 2022-03-31 CVE Published
  • 2023-10-22 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (2)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Elecom
Search vendor "Elecom"
Wrc-1167gst2 Firmware
Search vendor "Elecom" for product "Wrc-1167gst2 Firmware"
<= 1.25
Search vendor "Elecom" for product "Wrc-1167gst2 Firmware" and version " <= 1.25"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1167gst2
Search vendor "Elecom" for product "Wrc-1167gst2"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-1167gst2a Firmware
Search vendor "Elecom" for product "Wrc-1167gst2a Firmware"
<= 1.25
Search vendor "Elecom" for product "Wrc-1167gst2a Firmware" and version " <= 1.25"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1167gst2a
Search vendor "Elecom" for product "Wrc-1167gst2a"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-1167gst2h Firmware
Search vendor "Elecom" for product "Wrc-1167gst2h Firmware"
<= 1.25
Search vendor "Elecom" for product "Wrc-1167gst2h Firmware" and version " <= 1.25"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1167gst2h
Search vendor "Elecom" for product "Wrc-1167gst2h"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-2533gs2-b Firmware
Search vendor "Elecom" for product "Wrc-2533gs2-b Firmware"
<= 1.52
Search vendor "Elecom" for product "Wrc-2533gs2-b Firmware" and version " <= 1.52"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-2533gs2-b
Search vendor "Elecom" for product "Wrc-2533gs2-b"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-2533gs2-w Firmware
Search vendor "Elecom" for product "Wrc-2533gs2-w Firmware"
<= 1.52
Search vendor "Elecom" for product "Wrc-2533gs2-w Firmware" and version " <= 1.52"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-2533gs2-w
Search vendor "Elecom" for product "Wrc-2533gs2-w"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-1750gs Firmware
Search vendor "Elecom" for product "Wrc-1750gs Firmware"
<= 1.03
Search vendor "Elecom" for product "Wrc-1750gs Firmware" and version " <= 1.03"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1750gs
Search vendor "Elecom" for product "Wrc-1750gs"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-1750gsv Firmware
Search vendor "Elecom" for product "Wrc-1750gsv Firmware"
<= 2.11
Search vendor "Elecom" for product "Wrc-1750gsv Firmware" and version " <= 2.11"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1750gsv
Search vendor "Elecom" for product "Wrc-1750gsv"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-1900gst Firmware
Search vendor "Elecom" for product "Wrc-1900gst Firmware"
<= 1.03
Search vendor "Elecom" for product "Wrc-1900gst Firmware" and version " <= 1.03"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1900gst
Search vendor "Elecom" for product "Wrc-1900gst"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-2533gst Firmware
Search vendor "Elecom" for product "Wrc-2533gst Firmware"
<= 1.03
Search vendor "Elecom" for product "Wrc-2533gst Firmware" and version " <= 1.03"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-2533gst
Search vendor "Elecom" for product "Wrc-2533gst"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-2533gst2 Firmware
Search vendor "Elecom" for product "Wrc-2533gst2 Firmware"
<= 1.25
Search vendor "Elecom" for product "Wrc-2533gst2 Firmware" and version " <= 1.25"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-2533gst2
Search vendor "Elecom" for product "Wrc-2533gst2"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-2533gsta Firmware
Search vendor "Elecom" for product "Wrc-2533gsta Firmware"
<= 1.03
Search vendor "Elecom" for product "Wrc-2533gsta Firmware" and version " <= 1.03"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-2533gsta
Search vendor "Elecom" for product "Wrc-2533gsta"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-2533gst2sp Firmware
Search vendor "Elecom" for product "Wrc-2533gst2sp Firmware"
<= 1.25
Search vendor "Elecom" for product "Wrc-2533gst2sp Firmware" and version " <= 1.25"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-2533gst2sp
Search vendor "Elecom" for product "Wrc-2533gst2sp"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-2533gst2-g Firmware
Search vendor "Elecom" for product "Wrc-2533gst2-g Firmware"
<= 1.25
Search vendor "Elecom" for product "Wrc-2533gst2-g Firmware" and version " <= 1.25"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-2533gst2-g
Search vendor "Elecom" for product "Wrc-2533gst2-g"
--
Safe
Elecom
Search vendor "Elecom"
Edwrc-2533gst2 Firmware
Search vendor "Elecom" for product "Edwrc-2533gst2 Firmware"
<= 1.25
Search vendor "Elecom" for product "Edwrc-2533gst2 Firmware" and version " <= 1.25"
-
Affected
in Elecom
Search vendor "Elecom"
Edwrc-2533gst2
Search vendor "Elecom" for product "Edwrc-2533gst2"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-1167gs2-b Firmware
Search vendor "Elecom" for product "Wrc-1167gs2-b Firmware"
<= 1.65
Search vendor "Elecom" for product "Wrc-1167gs2-b Firmware" and version " <= 1.65"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1167gs2-b
Search vendor "Elecom" for product "Wrc-1167gs2-b"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-1167gs2h-b Firmware
Search vendor "Elecom" for product "Wrc-1167gs2h-b Firmware"
<= 1.65
Search vendor "Elecom" for product "Wrc-1167gs2h-b Firmware" and version " <= 1.65"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1167gs2h-b
Search vendor "Elecom" for product "Wrc-1167gs2h-b"
--
Safe
Elecom
Search vendor "Elecom"
Wmc-dlgst2-w Firmware
Search vendor "Elecom" for product "Wmc-dlgst2-w Firmware"
<= 1.24
Search vendor "Elecom" for product "Wmc-dlgst2-w Firmware" and version " <= 1.24"
-
Affected
in Elecom
Search vendor "Elecom"
Wmc-dlgst2-w
Search vendor "Elecom" for product "Wmc-dlgst2-w"
--
Safe
Elecom
Search vendor "Elecom"
Wmc-m1267gst2-w Firmware
Search vendor "Elecom" for product "Wmc-m1267gst2-w Firmware"
<= 1.24
Search vendor "Elecom" for product "Wmc-m1267gst2-w Firmware" and version " <= 1.24"
-
Affected
in Elecom
Search vendor "Elecom"
Wmc-m1267gst2-w
Search vendor "Elecom" for product "Wmc-m1267gst2-w"
--
Safe
Elecom
Search vendor "Elecom"
Wmc-2hc-w Firmware
Search vendor "Elecom" for product "Wmc-2hc-w Firmware"
<= 1.24
Search vendor "Elecom" for product "Wmc-2hc-w Firmware" and version " <= 1.24"
-
Affected
in Elecom
Search vendor "Elecom"
Wmc-2hc-w
Search vendor "Elecom" for product "Wmc-2hc-w"
--
Safe
Elecom
Search vendor "Elecom"
Wmc-c2533gst-w Firmware
Search vendor "Elecom" for product "Wmc-c2533gst-w Firmware"
<= 1.24
Search vendor "Elecom" for product "Wmc-c2533gst-w Firmware" and version " <= 1.24"
-
Affected
in Elecom
Search vendor "Elecom"
Wmc-c2533gst-w
Search vendor "Elecom" for product "Wmc-c2533gst-w"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-1900gst2 Firmware
Search vendor "Elecom" for product "Wrc-1900gst2 Firmware"
<= 1.15
Search vendor "Elecom" for product "Wrc-1900gst2 Firmware" and version " <= 1.15"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1900gst2
Search vendor "Elecom" for product "Wrc-1900gst2"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-1900gst2sp Firmware
Search vendor "Elecom" for product "Wrc-1900gst2sp Firmware"
<= 1.15
Search vendor "Elecom" for product "Wrc-1900gst2sp Firmware" and version " <= 1.15"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1900gst2sp
Search vendor "Elecom" for product "Wrc-1900gst2sp"
--
Safe
Elecom
Search vendor "Elecom"
Wrc-1750gst2 Firmware
Search vendor "Elecom" for product "Wrc-1750gst2 Firmware"
<= 1.14
Search vendor "Elecom" for product "Wrc-1750gst2 Firmware" and version " <= 1.14"
-
Affected
in Elecom
Search vendor "Elecom"
Wrc-1750gst2
Search vendor "Elecom" for product "Wrc-1750gst2"
--
Safe