OS Command Injection Vulnerability in Nintendo Wi-Fi Network Adapter by Nintendo
CVE-2022-36381

7.2HIGH

Key Information:

Vendor

Nintendo Co., Ltd.

Status
Nintendo Wi-fi Network Adaptor Wap-001
Vendor
CVE Published:
16 August 2022

What is CVE-2022-36381?

An OS command injection vulnerability exists in the Nintendo Wi-Fi Network Adaptor WAP-001. This flaw allows an attacker who possesses administrative privileges to execute arbitrary operating system commands through unspecified vectors, potentially leading to unauthorized control over the device. Users are advised to review their security measures and consult the vendor for applicable patches.

Affected Version(s)

Nintendo Wi-Fi Network Adaptor WAP-001 All versions

References

https://www.nintendo.co.jp/support/information/2022/0720....
x_refsource_MISC
https://jvn.jp/en/jp/JVN17625382/index.html
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-36381 : OS Command Injection Vulnerability in Nintendo Wi-Fi Network Adapter by Nintendo