CVE-2023-39455

State
Published
Severity
Not scored
Published
Aug 18, 2023
Updated
Aug 2, 2024
Reserved
Aug 9, 2023

Read the record on cve.org

Description

OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
WRC-600GHBK-AELECOM CO.,LTD.
  • all versionsAffected
WRC-1467GHBK-AELECOM CO.,LTD.
  • all versionsAffected
WRC-1900GHBK-AELECOM CO.,LTD.
  • all versionsAffected
WRC-733FEBK2-AELECOM CO.,LTD.
  • all versionsAffected
WRC-F1167ACF2ELECOM CO.,LTD.
  • all versionsAffected
WRC-1467GHBK-SELECOM CO.,LTD.
  • all versionsAffected
WRC-1900GHBK-SELECOM CO.,LTD.
  • all versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.