Unscored CVE-2023-39944 EUVD-2023-43642GHSA-fc23-2vp6-qwpc

OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the produc…

Published Aug 18, 2023 · Updated Oct 8, 2024 · Assigned by jpcert

Vendor: ELECOM Product: WRC-1750GHBK Product: WRC-F1167ACF

Description

OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request.

Affected products

Vendor	Product	Affected	Fixed
ELECOM	WRC-F1167ACF	all versions	—
ELECOM	WRC-1750GHBK	all versions	—

References

https://www.elecom.co.jp/news/security/20230810-01/
https://jvn.jp/en/vu/JVNVU91630351/