CVE-2022-3703CWE-345

ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity

High · published November 10, 2022

CVSS v3.1
7.6
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.1th percentile
Weakness
CWE-345 · Insufficient Verification of Data Authenticity
Published
2022-11-10T21:32Z
EPSS history
Timeline
  • 10 NOV 21:32Z
    ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity
    cvelistv5