CVE-2022-29516

Name: CVE-2022-29516
Creator: NVD / NIST
Published: 2022-05-18T15:15:10.123+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

CRITICALCVSS 9.8/10EPSS 1.95%

Last modified Jun 17, 2026

CVE-2022-29516 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 NW(1100, 3200, 3500), IPCOM EX2 DC, IPCOM EX2 DC, IPCOM EX IN(2300, 2500, 2700), IPCOM EX LB(1100, 1300, 2300, 2500, 2700), IPCOM EX SC(1100, 1300, 2300, 2500, 2700), and IPCOM EX NW(1100, 1300, 2300, 2500, 2700)) allows a remote attacker to execute an arbitrary OS command via unspecified vectors.. EPSS estimates a 1.95% chance of exploitation in the next 30 days.

Description

The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 NW(1100, 3200, 3500), IPCOM EX2 DC, IPCOM EX2 DC, IPCOM EX IN(2300, 2500, 2700), IPCOM EX LB(1100, 1300, 2300, 2500, 2700), IPCOM EX SC(1100, 1300, 2300, 2500, 2700), and IPCOM EX NW(1100, 1300, 2300, 2500, 2700)) allows a remote attacker to execute an arbitrary OS command via unspecified vectors.

Metrics

CVSS 3.1

9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

1.95%

77.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-78

Affected Software

Vendor	Product	Versions
Fujitsu	Ipcom Ex2 Nw 1100 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 Nw 3500 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 Nw 3200 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 Sc 1100 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 Sc 3500 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 Sc 3200 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 Lb 1100 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 Lb 3500 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 Lb 3200 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 In 1100 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 In 3200 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 In 3500 Firmware	< v01l05_nf0501
Fujitsu	Ipcom Ex2 Dc 3500 Firmware	< v02l21_nf0201
Fujitsu	Ipcom Ex2 Dc 3200 Firmware	< v02l21_nf0201
Fujitsu	Ipcom Ex In 2300 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex In 2500 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex In 2700 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Lb 1100 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Lb 1300 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Lb 2300 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Lb 2500 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Lb 2700 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Sc 1100 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Sc 1300 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Sc 2300 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Sc 2500 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Sc 2700 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Nw 1100 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Nw 1300 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Nw 2300 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Nw 2500 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ex Nw 2700 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Ls 100 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Ls 200 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Ls 220 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Ls Plus 100 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Ls Plus 200 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Ls Plus 220 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Ls Plus2 200 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Ls Plus2 220 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Sc 100 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Sc 200 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Sc 220 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Sc Plus 100 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Sc Plus 200 Firmware	< e20l33_nf1101
Fujitsu	Ipcom Ve2 Sc Plus 220 Firmware	< e20l33_nf1101

References

https://jvn.jp/en/jp/JVN96561229/index.htmlThird Party Advisory
https://www.fujitsu.com/jp/products/network/support/2022/ipcom-01/Vendor Advisory
https://jvn.jp/en/jp/JVN96561229/index.htmlThird Party Advisory
https://www.fujitsu.com/jp/products/network/support/2022/ipcom-01/Vendor Advisory

Timeline

Published: May 18, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2022-29516?

How severe is CVE-2022-29516?

CVE-2022-29516 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 1.95% probability of exploitation in the next 30 days.

How do I fix CVE-2022-29516?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-29516?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST