Lucene search
HistoryNov 10, 2022 - 10:15 p.m.
CVE-2022-3703
etic
telecom
remote access server
vulnerability
malicious firmware
backdoor
privilege escalation
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0.003
Percentile
65.7%
All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device.
Affected configurations
Node
etictelecomras-c-100-lwMatch-
ORetictelecomras-e-100Match-
ORetictelecomras-e-220Match-
ORetictelecomras-e-400Match-
ORetictelecomras-ec-220-lwMatch-
ORetictelecomras-ec-400-lwMatch-
ORetictelecomras-ec-480-lwMatch-
ORetictelecomras-ecw-220-lwMatch-
ORetictelecomras-ecw-400-lwMatch-
ORetictelecomras-ew-100Match-
ORetictelecomras-ew-220Match-
ORetictelecomras-ew-400Match-
ORetictelecomrfm-eMatch-
etictelecomremote_access_server_firmwareRange≤4.5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| etictelecom | ras-c-100-lw | - | cpe:2.3:h:etictelecom:ras-c-100-lw:-:*:*:*:*:*:*:* |
| etictelecom | ras-e-100 | - | cpe:2.3:h:etictelecom:ras-e-100:-:*:*:*:*:*:*:* |
| etictelecom | ras-e-220 | - | cpe:2.3:h:etictelecom:ras-e-220:-:*:*:*:*:*:*:* |
| etictelecom | ras-e-400 | - | cpe:2.3:h:etictelecom:ras-e-400:-:*:*:*:*:*:*:* |
| etictelecom | ras-ec-220-lw | - | cpe:2.3:h:etictelecom:ras-ec-220-lw:-:*:*:*:*:*:*:* |
| etictelecom | ras-ec-400-lw | - | cpe:2.3:h:etictelecom:ras-ec-400-lw:-:*:*:*:*:*:*:* |
| etictelecom | ras-ec-480-lw | - | cpe:2.3:h:etictelecom:ras-ec-480-lw:-:*:*:*:*:*:*:* |
| etictelecom | ras-ecw-220-lw | - | cpe:2.3:h:etictelecom:ras-ecw-220-lw:-:*:*:*:*:*:*:* |
| etictelecom | ras-ecw-400-lw | - | cpe:2.3:h:etictelecom:ras-ecw-400-lw:-:*:*:*:*:*:*:* |
| etictelecom | ras-ew-100 | - | cpe:2.3:h:etictelecom:ras-ew-100:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
prion
prion
Privilege escalation
2022-11-10 22:15:00
cve
cve
CVE-2022-3703
2022-11-10 22:15:14
ics
ics
ETIC Telecom Remote Access Server (RAS) (Update A)
2023-07-27 12:00:00
thn
thn
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0.003
Percentile
65.7%
Related for NVD:CVE-2022-3703