Skip to content
Fencer Vulns
critical 9.8

CVE-2022-29516 json

The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500),…

published 2022-05-18 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-33853

cvss
9.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.2%
EPSS 2.2% chance of exploitation in 30 days, percentile 82%
public exploits
0
none known

Summary

The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 NW(1100, 3200, 3500), IPCOM EX2 DC, IPCOM EX2 DC, IPCOM EX IN(2300, 2500, 2700), IPCOM EX LB(1100, 1300, 2300, 2500, 2700), IPCOM EX SC(1100, 1300, 2300, 2500, 2700), and IPCOM EX NW(1100, 1300, 2300, 2500, 2700)) allows a remote attacker to execute an arbitrary OS command via unspecified vectors.

Patch / fix

  • fujitsu ipcom_ex2_nw_1100_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_nw_3500_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_nw_3200_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_sc_1100_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_sc_3500_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_sc_3200_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_lb_1100_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_lb_3500_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_lb_3200_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_in_1100_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_in_3200_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_in_3500_firmware v01l05_nf0501
  • fujitsu ipcom_ex2_dc_3500_firmware v02l21_nf0201
  • fujitsu ipcom_ex2_dc_3200_firmware v02l21_nf0201
  • fujitsu ipcom_ex_in_2300_firmware e20l33_nf1101
  • fujitsu ipcom_ex_in_2500_firmware e20l33_nf1101
  • fujitsu ipcom_ex_in_2700_firmware e20l33_nf1101
  • fujitsu ipcom_ex_lb_1100_firmware e20l33_nf1101
  • fujitsu ipcom_ex_lb_1300_firmware e20l33_nf1101
  • fujitsu ipcom_ex_lb_2300_firmware e20l33_nf1101

Exploit prediction

2.19% chance of exploitation in the next 30 days, higher than 82% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

  • FUJITSU LIMITED IPCOM EX2 series, IPCOM EX series, IPCOM VE2 series, and IPCOM VA2/VE1 series

Classification

Weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.