Riskcovery

CVE-2023-37564

State
Published
Severity
Not scored
Published
Jul 13, 2023
Updated
Nov 6, 2024
Reserved
Jul 7, 2023

Read the record on cve.org

Description

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OS command with a root privilege by sending a specially crafted request. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, and WRC-1167FEBK-A v1.18 and earlier.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
WRC-1167GHBK-SELECOM CO.,LTD.
  • v1.03 and earlierAffected
WRC-1167GEBK-SELECOM CO.,LTD.
  • v1.03 and earlierAffected
WRC-1167FEBK-SELECOM CO.,LTD.
  • v1.04 and earlierAffected
WRC-1167GHBK3-AELECOM CO.,LTD.
  • v1.24 and earlierAffected
WRC-1167FEBK-AELECOM CO.,LTD.
  • v1.18 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.