Back to Database
Status published
Critical
CVE-2022-29525
Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential...
Vulnerability Description
Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-29525
Credits & Attribution
No credits recorded in the NVD database.
References
More from Rakuten Mobile, Inc.
View All →CVE-2024-52033
Exposure of sensitive system information to an unauthorized control sphere...
Medium
5.3
CVE-2024-48895
Improper neutralization of special elements used in an OS command...
High
8.8
CVE-2024-47865
Missing authentication for critical function vulnerability exists in Rakuten Turbo...
Medium
5.3
CVE-2023-40282
Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows...
Unknown
0
CVE-2022-28704
Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or...
High
7.2
Affected Vendor
Rakuten Mobile, Inc.
View all reports →Affected Software
Rakuten Casa
Vulnerable Versions:
version AP_F_V1_4_1 or AP_F_V2_0_0
Timeline
Official Publish:
June 13th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.