CVE-2023-32626

State: Published
Severity: Not scored
Published: Aug 18, 2023
Updated: Oct 8, 2024
Reserved: Aug 9, 2023

Description

Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.

Scores

The record has no CVSS score.

Weaknesses

CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

Product	Versions
LAN-W300N/RSLOGITEC CORPORATION	all versionsAffected
LAN-W300N/PR5LOGITEC CORPORATION	all versionsAffected

References

https://www.elecom.co.jp/news/security/20230810-01/
https://jvn.jp/en/vu/JVNVU91630351/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.