Riskcovery

CVE-2023-35991

State
Published
Severity
8.8 High
Published
Aug 18, 2023
Updated
Oct 21, 2024
Reserved
Aug 9, 2023

Read the record on cve.org

Description

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LAN-W300N/DRLOGITEC CORPORATION
  • all versionsAffected
LAN-WH300N/DRLOGITEC CORPORATION
  • all versionsAffected
LAN-W300N/PLOGITEC CORPORATION
  • all versionsAffected
LAN-WH450N/GPLOGITEC CORPORATION
  • all versionsAffected
LAN-WH300AN/DGPLOGITEC CORPORATION
  • all versionsAffected
LAN-WH300N/DGPLOGITEC CORPORATION
  • all versionsAffected
LAN-WH300ANDGPELOGITEC CORPORATION
  • all versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.