What is CVE-2021-37384?

CVE-2021-37384 is a critical-severity vulnerability in Furukawa 423-41w\/ac, classified under Code Injection. CVSS score: 9.8/10. Published 2023-07-17.

How severe is CVE-2021-37384?

Critical severity. CVSS v3 base score is 9.8 out of 10.

RCE in Furukawa 423-41w\/ac

CVE-2021-37384

RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.017 (74.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Furukawa 423-41w\/ac
Furukawa 423-41w\/ac_firmware
Furukawa Ld420-10r
Furukawa Ld420-10r_firmware
Furukawa Ld421-21w
Furukawa Ld421-21w_firmware
Furukawa Ld421-21wv
Furukawa Ld421-21wv_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (Not Applicable)
cve@mitre.org (Not Applicable)
cve@mitre.org (Third Party Advisory)
cve@mitre.org

Frequently asked questions

What is CVE-2021-37384?: CVE-2021-37384 is a critical-severity vulnerability in Furukawa 423-41w\/ac, classified under Code Injection. CVSS score: 9.8/10. Published 2023-07-17.
How severe is CVE-2021-37384?: Critical severity. CVSS v3 base score is 9.8 out of 10.