CVE-2023-40069
Summary
| CVE | CVE-2023-40069 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-08-18 10:15:00 UTC |
| Updated | 2023-08-23 16:46:00 UTC |
| Description | OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions. |
Risk And Classification
Problem Types: CWE-78
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Elecom | Wrc-1167ghbk2 | - | All | All | All |
| Operating System | Elecom | Wrc-1167ghbk2 Firmware | All | All | All | All |
| Hardware | Elecom | Wrc-1750ghbk | - | All | All | All |
| Hardware | Elecom | Wrc-1750ghbk-e | - | All | All | All |
| Operating System | Elecom | Wrc-1750ghbk-e Firmware | All | All | All | All |
| Hardware | Elecom | Wrc-1750ghbk2-i | - | All | All | All |
| Operating System | Elecom | Wrc-1750ghbk2-i Firmware | All | All | All | All |
| Operating System | Elecom | Wrc-1750ghbk Firmware | All | All | All | All |
| Hardware | Elecom | Wrc-f1167acf | - | All | All | All |
| Operating System | Elecom | Wrc-f1167acf Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.elecom.co.jp/news/security/20230810-01 | MISC | www.elecom.co.jp | |
| JVNVU#91630351: Multiple vulnerabilities in ELECOM and LOGITEC network devices | MISC | jvn.jp | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.