Skip to content
OpenAdvisories
High · 8.8 CVE-2022-44606 EUVD-2022-47544GHSA-4cvw-vh6j-v44x

OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote aut…

Published Dec 7, 2022 · Updated Apr 23, 2025 · Assigned by jpcert

Vendor: UNIMO Technology Product: UDR-JA1604/UDR-JA1608/UDR-JA1616

Description

OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

Affected products

VendorProductAffectedFixed
UNIMO Technology UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier —

References