CVE-2022-44606: Unimo Udr-JA1604 Firmware

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

Affected products

• Unimo Udr-JA1604 Firmware: before 71x10.1.107114.43a (fixed in 71x10.1.107114.43a)
• Unimo Udr-JA1608 Firmware: before 71x10.1.107114.43a (fixed in 71x10.1.107114.43a)
• Unimo Udr-JA1616 Firmware: before 71x10.1.107114.43a (fixed in 71x10.1.107114.43a)

Published 2022-12-07. Last modified 2026-06-17.