CVE-2022-3703

—

CVSS 3.1

10.0 critical

EPSS

<1%p22

Published

Nov 10, 2022 (Nov 10, 2022)

Modified

Jun 17, 2026

Description

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device.

Vendors: etictelecom
Products: remote access server firmware
Weakness: CWE-345
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news2 stories

Critical Infrastructure at Risk from New Vulnerabilities Found in Wireless IIoT Devices

The Hacker NewsFeb 18, 06:52 UTC · Feb 18, 2023Vulnerability CVE-2022-3703 CVE-2022-41607 CVE-2022-40981+4 CVEs

CISA Warns of Critical Vulnerabilities in 3 Industrial Control System Software

The Hacker NewsNov 4, 10:01 UTC · Nov 4, 2022Vulnerability CVE-2022-3703 CVE-2022-41607 CVE-2022-40981+4 CVEs