Fujitsu Ipcom VE2 Ls Plus 220 Firmware vulnerabilities

2 CVEs affecting Fujitsu Ipcom VE2 Ls Plus 220 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-39921, published 2024-09-04.

More from Fujitsu.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-29516, published 2022-05-18. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 NW(1100, 3200, 3500), IPCOM EX2 DC, IPCOM EX2 DC,…
• CVE-2024-39921, published 2024-09-04. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF0401, V02L20NF0001 to V02L21NF0301, and IPCOM VE2 Series V01L04NF0001 to…