Medium severity · published Feb 1, 2022
CVE-2021-44746
UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prior, Data Maintenance Tool for DT900…
5.3
CVSS
1.1%
EPSS
No
On KEV
Description
UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prior, Data Maintenance Tool for DT900 Series V5.3.0.0 and prior, Data Maintenance Tool for DT800 Series V4.2.0.0 and prior allows a remote attacker who can access to the internal network, the configuration information may be obtained.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UD
Univerge Dt800 Data Maintenance Tool · Nec
through 4.2.0.0 · source: NVD
UD
Univerge Dt820 Firmware · Nec
through 3.2.7.0 · source: NVD
UD
Univerge Dt830 Firmware · Nec
through 5.2.7.0 · source: NVD
UD
Univerge Dt900 Data Maintenance Tool · Nec
through 5.3.0.0 · source: NVD
UD
Univerge Dt930 Firmware · Nec
through 2.4.0.0 · source: NVD
UI
Univerge IP Phone Manager · Nec
through 8.9.1 · source: NVD
Affected product
UD
Univerge Dt800 Data Maintenance Tool
Nec