Skip to content
OpenAdvisories
Unscored CVE-2023-37561 EUVD-2023-41447GHSA-gfq6-w9c5-675j

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to re…

Published Jul 13, 2023 · Updated Nov 5, 2024 · Assigned by jpcert

Description

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12 and earlier, WTC-300HWH v1.09 and earlier, WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier.

Affected products

VendorProductAffectedFixed
ELECOM WRH-300WH-H v2.12 and earlier —
ELECOM WTC-300HWH v1.09 and earlier —
ELECOM WTC-C1167GC-B v1.17 and earlier —
ELECOM WTC-C1167GC-W v1.17 and earlier —

References