CVE-2022-28704 is an improper access control vulnerability affecting Rakuten Casa devices running firmware versions AP_F_V1_4_1 or AP_F_V2_0_0. This flaw allows a remote attacker to gain root privileges and execute arbitrary operations if the device is in its default configuration, accepting SSH connections from the WAN and using default authentication credentials. Rated 7.2 HIGH on the CVSS scale, this vulnerability presents a significant risk due to its network-based attack vector and low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. The prerequisite of default settings and WAN-accessible SSH makes it a critical concern for unhardened deployments. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed on CISA's KEV catalog, suggesting no active widespread exploitation. Community discussion and media coverage are also minimal, indicating low public awareness despite its high severity.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
ap_f_v1_4_1CPE matchmatch criteria | cpe:2.3:a:rakuten:casa:ap_f_v1_4_1:*:*:*:*:*:*:* | ||
ap_f_v2_0_0CPE matchmatch criteria | cpe:2.3:a:rakuten:casa:ap_f_v2_0_0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.