CVE-2022-3703 — ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity

CVE-2022-3703

ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity PUBLISHED

Description (CNA)

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device.

Affected (CNA)

Vendor / product	Versions
ETIC Telecom / Remote Access Server (RAS)	affected 0 through 4.5.0

CWE

CWE-345

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-307-01

CISA-ADP

No English description supplied.

No references supplied.