Vulnerabilites related to elecom - wrc-1900ghbk-s_firmware
cve-2023-39445
Vulnerability from cvelistv5
Published
2023-08-18 09:40
Modified
2024-10-08 15:11
Severity ?
EPSS score ?
Summary
Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| LOGITEC CORPORATION | LAN-WH300N/RE |
Version: all versions |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T18:10:20.697Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { tags: [ "x_transferred", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:h:logitec:lan-wh300n_re:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "lan-wh300n_re", vendor: "logitec", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-39445", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-08T14:47:13.849174Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-94", description: "CWE-94 Improper Control of Generation of Code ('Code Injection')", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-08T15:11:13.950Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "LAN-WH300N/RE", vendor: "LOGITEC CORPORATION", versions: [ { status: "affected", version: "all versions", }, ], }, ], descriptions: [ { lang: "en", value: "Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.", }, ], problemTypes: [ { descriptions: [ { description: "Hidden Functionality", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-18T09:40:17.145Z", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { url: "https://jvn.jp/en/vu/JVNVU91630351/", }, ], }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2023-39445", datePublished: "2023-08-18T09:40:17.145Z", dateReserved: "2023-08-09T11:54:56.682Z", dateUpdated: "2024-10-08T15:11:13.950Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-39455
Vulnerability from cvelistv5
Published
2023-08-18 09:42
Modified
2024-08-02 18:10
Severity ?
EPSS score ?
Summary
OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.
References
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | ELECOM CO.,LTD. | WRC-600GHBK-A |
Version: all versions |
|||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T18:10:20.649Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { tags: [ "x_transferred", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "WRC-600GHBK-A", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1467GHBK-A", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1900GHBK-A", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-733FEBK2-A", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-F1167ACF2", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1467GHBK-S", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1900GHBK-S", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, ], descriptions: [ { lang: "en", value: "OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.", }, ], problemTypes: [ { descriptions: [ { description: "OS command injection", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-18T09:42:19.491Z", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { url: "https://jvn.jp/en/vu/JVNVU91630351/", }, ], }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2023-39455", datePublished: "2023-08-18T09:42:19.491Z", dateReserved: "2023-08-09T11:55:00.303Z", dateUpdated: "2024-08-02T18:10:20.649Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Vulnerability from fkie_nvd
Published
2023-08-18 10:15
Modified
2024-11-21 08:15
Severity ?
Summary
OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| vultures@jpcert.or.jp | https://jvn.jp/en/vu/JVNVU91630351/ | Third Party Advisory | |
| vultures@jpcert.or.jp | https://www.elecom.co.jp/news/security/20230810-01/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://jvn.jp/en/vu/JVNVU91630351/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.elecom.co.jp/news/security/20230810-01/ | Vendor Advisory |
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-600ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "59693326-E999-4115-BB4D-67C6B6A6FC4F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-600ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "62FEEDBD-C39E-46C4-87E7-B59967845A42", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1467ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BC533672-D149-4A6B-A60F-E5888A4D0866", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1467ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "9EE63634-3DBE-4B5F-B871-F076238BC4C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1900ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B6924154-8795-4E5D-8DA3-6EB49EEA2EC0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1900ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "F9EEA205-6C7C-4AB3-BAEF-30249B176DE8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-733febk2-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3ADFE2B7-2D1A-42A1-9BB5-BEB940464D53", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-733febk2-a:-:*:*:*:*:*:*:*", matchCriteriaId: "B2468934-2A7D-4DD7-8145-7F3E86F12BB1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-f1167acf2_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7236FA68-7625-427E-AD31-995EE0CAD0F9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-f1167acf2:-:*:*:*:*:*:*:*", matchCriteriaId: "A01DD657-E35F-434C-B9D1-6EFA4C69A0CF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1467ghbk-s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F19CD96A-4C04-4BFA-9E4D-8FC5E9E5E234", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1467ghbk-s:-:*:*:*:*:*:*:*", matchCriteriaId: "376A8656-1F77-4F34-B644-5DB95CEE1FD8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1900ghbk-s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A0420E3E-E12A-471E-8EE1-67E2BC70D3CA", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1900ghbk-s:-:*:*:*:*:*:*:*", matchCriteriaId: "20D26F24-2789-4111-983D-F3CF358E5B19", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.", }, { lang: "es", value: "La vulnerabilidad de inyección de comandos del sistema operativo en los routers LAN inalámbricos ELECOM permite a un usuario autenticado ejecutar un comando arbitrario del sistema operativo enviando una solicitud especialmente diseñada. Los productos y versiones afectados son los siguientes WRC-600GHBK-A todas las versiones, WRC-1467GHBK-A todas las versiones, WRC-1900GHBK-A todas las versiones, WRC-733FEBK2-A todas las versiones, WRC-F1167ACF2 todas las versiones, WRC-1467GHBK-S todas las versiones y WRC-1900GHBK-S todas las versiones.\n", }, ], id: "CVE-2023-39455", lastModified: "2024-11-21T08:15:27.430", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2023-08-18T10:15:12.337", references: [ { source: "vultures@jpcert.or.jp", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, { source: "vultures@jpcert.or.jp", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, ], sourceIdentifier: "vultures@jpcert.or.jp", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-78", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2023-08-18 10:15
Modified
2024-11-21 08:15
Severity ?
Summary
Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| vultures@jpcert.or.jp | https://jvn.jp/en/vu/JVNVU91630351/ | Third Party Advisory | |
| vultures@jpcert.or.jp | https://www.elecom.co.jp/news/security/20230810-01/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://jvn.jp/en/vu/JVNVU91630351/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.elecom.co.jp/news/security/20230810-01/ | Vendor Advisory |
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1467ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BC533672-D149-4A6B-A60F-E5888A4D0866", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1467ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "9EE63634-3DBE-4B5F-B871-F076238BC4C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1467ghbk-s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F19CD96A-4C04-4BFA-9E4D-8FC5E9E5E234", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1467ghbk-s:-:*:*:*:*:*:*:*", matchCriteriaId: "376A8656-1F77-4F34-B644-5DB95CEE1FD8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1900ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B6924154-8795-4E5D-8DA3-6EB49EEA2EC0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1900ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "F9EEA205-6C7C-4AB3-BAEF-30249B176DE8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1900ghbk-s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A0420E3E-E12A-471E-8EE1-67E2BC70D3CA", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1900ghbk-s:-:*:*:*:*:*:*:*", matchCriteriaId: "20D26F24-2789-4111-983D-F3CF358E5B19", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-600ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "59693326-E999-4115-BB4D-67C6B6A6FC4F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-600ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "62FEEDBD-C39E-46C4-87E7-B59967845A42", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-733febk2-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3ADFE2B7-2D1A-42A1-9BB5-BEB940464D53", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-733febk2-a:-:*:*:*:*:*:*:*", matchCriteriaId: "B2468934-2A7D-4DD7-8145-7F3E86F12BB1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-f1167acf2_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7236FA68-7625-427E-AD31-995EE0CAD0F9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-f1167acf2:-:*:*:*:*:*:*:*", matchCriteriaId: "A01DD657-E35F-434C-B9D1-6EFA4C69A0CF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.", }, { lang: "es", value: "La vulnerabilidad de funcionalidad oculta en LAN-WH300N/RE todas las versiones proporcionadas por LOGITEC CORPORATION permite a un atacante no autenticado ejecutar código arbitrario enviando un archivo especialmente diseñado a la consola de gestión determinada del producto.\n", }, ], id: "CVE-2023-39445", lastModified: "2024-11-21T08:15:26.513", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2023-08-18T10:15:12.037", references: [ { source: "vultures@jpcert.or.jp", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, { source: "vultures@jpcert.or.jp", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, ], sourceIdentifier: "vultures@jpcert.or.jp", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "NVD-CWE-Other", }, ], source: "nvd@nist.gov", type: "Primary", }, { description: [ { lang: "en", value: "CWE-94", }, ], source: "134c704f-9b21-4f2e-91b3-4a467353bcc0", type: "Secondary", }, ], }