Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2022-3703

ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ETIC Telecom Remote Access Server (RAS)

Default version status: unaffected

  • 0 to ≤ 4.5.0affected

References