Vulnerabilities > CVE-2021-37384 - Unspecified vulnerability in Furukawa products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 4 | |
| Hardware | 4 |
References
- https://cwe.mitre.org/data/definitions/94.html
- https://owasp.org/www-community/attacks/Code_Injection
- https://gist.githubusercontent.com/LuigiPolidorio/9fe61cf2edee63152161ffc52c39f6cd/raw/529cf49103e0fdf4eeb970fa1f62fa508ebe7c3c/reference.txt
- https://www.softwall.com.br/cves/publicacao-rce-html-injection-furukawa/