CVE-2023-35991
Summary
| CVE | CVE-2023-35991 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-08-18 10:15:00 UTC |
| Updated | 2023-08-29 18:58:00 UTC |
| Description | Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Elecom | Lan-w300n/dr | - | All | All | All |
| Operating System | Elecom | Lan-w300n/dr Firmware | All | All | All | All |
| Operating System | Elecom | Lan-w300n/dr Firmware | - | All | All | All |
| Hardware | Elecom | Lan-w300n/p | - | All | All | All |
| Operating System | Elecom | Lan-w300n/p Firmware | All | All | All | All |
| Operating System | Elecom | Lan-w300n/p Firmware | - | All | All | All |
| Hardware | Elecom | Lan-wh300andgpe | - | All | All | All |
| Operating System | Elecom | Lan-wh300andgpe Firmware | All | All | All | All |
| Operating System | Elecom | Lan-wh300andgpe Firmware | - | All | All | All |
| Hardware | Elecom | Lan-wh300an/dgp | - | All | All | All |
| Operating System | Elecom | Lan-wh300an/dgp Firmware | All | All | All | All |
| Operating System | Elecom | Lan-wh300an/dgp Firmware | - | All | All | All |
| Hardware | Elecom | Lan-wh300n/dgp | - | All | All | All |
| Operating System | Elecom | Lan-wh300n/dgp Firmware | All | All | All | All |
| Operating System | Elecom | Lan-wh300n/dgp Firmware | - | All | All | All |
| Hardware | Elecom | Lan-wh300n/dr | - | All | All | All |
| Operating System | Elecom | Lan-wh300n/dr Firmware | All | All | All | All |
| Operating System | Elecom | Lan-wh300n/dr Firmware | - | All | All | All |
| Hardware | Elecom | Lan-wh450n/gp | - | All | All | All |
| Operating System | Elecom | Lan-wh450n/gp Firmware | All | All | All | All |
| Operating System | Elecom | Lan-wh450n/gp Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.elecom.co.jp/news/security/20230810-01 | MISC | www.elecom.co.jp | |
| JVNVU#91630351: Multiple vulnerabilities in ELECOM and LOGITEC network devices | MISC | jvn.jp | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.