Hiromu Kubiura

Researcher fromNational Institute of Information and Communications Technology Cybersecurity Research Institute

#4362of 56,336

63.6Total CVSS

Vulnerabilities · 7

High

5

Critical

2

Cbc · Cbc · CVE-2023-38585

**Name of the Vulnerable Software and Affected Versions** CBC products (affected versions not specified) **Description** The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. The NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported and will not receive updates. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cbc · Cbc · CVE-2023-40144

**Name of the Vulnerable Software and Affected Versions** CBC products (affected versions not specified) **Description** The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. Note that certain series, including NR4H, NR8H, NR16H, and several DR series, are no longer supported and will not receive updates. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Kb-Ahr08D · Kb-Ahr08D · CVE-2023-30762

**Name of the Vulnerable Software and Affected Versions** KB-AHR04D versions prior to 91110.1.101106.78 KB-AHR08D versions prior to 91210.1.101106.78 KB-AHR16D versions prior to 91310.1.101106.78 KB-IRIP04A versions prior to 95110.1.100290.78A KB-IRIP08A versions prior to 95210.1.100290.78A KB-IRIP16A versions prior to 95310.1.100290.78A **Description** An improper authentication issue exists in the KB-AHR series and KB-IRIP series, allowing for the potential execution of arbitrary OS commands or alteration of device settings if exploited. **Recommendations** For KB-AHR04D versions prior to 91110.1.101106.78, update to a version after 91110.1.101106.78. For KB-AHR08D versions prior to 91210.1.101106.78, update to a version after 91210.1.101106.78. For KB-AHR16D versions prior to 91310.1.101106.78, update to a version after 91310.1.101106.78. For KB-IRIP04A versions prior to 95110.1.100290.78A, update to a version after 95110.1.100290.78A. For KB-IRIP08A versions prior to 95210.1.100290.78A, update to a version after 95210.1.100290.78A. For KB-IRIP16A versions prior to 95310.1.100290.78A, update to a version after 95310.1.100290.78A.

Kb-Ahr08D · Kb-Ahr08D · CVE-2023-30766

**Name of the Vulnerable Software and Affected Versions** KB-AHR04D versions prior to 91110.1.101106.78 KB-AHR08D versions prior to 91210.1.101106.78 KB-AHR16D versions prior to 91310.1.101106.78 KB-IRIP04A versions prior to 95110.1.100290.78A KB-IRIP08A versions prior to 95210.1.100290.78A KB-IRIP16A versions prior to 95310.1.100290.78A **Description** A hidden functionality issue exists in KB-AHR series and KB-IRIP series. If this issue is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. **Recommendations** For KB-AHR04D versions prior to 91110.1.101106.78, update to version 91110.1.101106.78 or later. For KB-AHR08D versions prior to 91210.1.101106.78, update to version 91210.1.101106.78 or later. For KB-AHR16D versions prior to 91310.1.101106.78, update to version 91310.1.101106.78 or later. For KB-IRIP04A versions prior to 95110.1.100290.78A, update to version 95110.1.100290.78A or later. For KB-IRIP08A versions prior to 95210.1.100290.78A, update to version 95210.1.100290.78A or later. For KB-IRIP16A versions prior to 95310.1.100290.78A, update to version 95310.1.100290.78A or later.

Unknown · Udr-Ja1616 · CVE-2022-44606

**Name of the Vulnerable Software and Affected Versions** UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier **Description** The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings. **Recommendations** For UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier, update to a version later than 71x10.1.107112.43A to resolve the issue.

Unknown · Udr-Ja1616 · CVE-2022-44620

**Name of the Vulnerable Software and Affected Versions** UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier **Description** The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings due to an improper authentication vulnerability. **Recommendations** For UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unknown · Udr-Ja1616 · CVE-2022-43464

**Name of the Vulnerable Software and Affected Versions** UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier **Description** The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings. This is due to a hidden functionality vulnerability. **Recommendations** For UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier, update to a version later than 71x10.1.107112.43A to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.