CVE-2021-37384: Furukawa 423-41w/ac Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface.

Affected products

• Furukawa 423-41w/ac Firmware: before 1.2.0 (fixed in 1.2.0)
• Furukawa LD420-10r Firmware: before 1.4.0 (fixed in 1.4.0)
• Furukawa LD421-21w Firmware: before 1.5.0 (fixed in 1.5.0)
• Furukawa LD421-21wv Firmware: before 1.5.0 (fixed in 1.5.0)

Published 2023-07-17. Last modified 2026-06-17.