CVE-2022-40981

CVE-2022-40981 is a critical malicious file upload vulnerability affecting all versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior. This flaw allows an unauthenticated attacker to upload arbitrary files, potentially overwriting critical system files, causing denial of service through disk exhaustion, or achieving full system compromise with administrator privileges. With a CVSS score of 10.0 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, leading to complete compromise of confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.