Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-40069 EUVD-2023-44676GHSA-hh45-jmxc-j9rr

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS …

Published Aug 18, 2023 · Updated Oct 8, 2024 · Assigned by jpcert

Description

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions.

Affected products

VendorProductAffectedFixed
ELECOM WRC-F1167ACF all versions —
ELECOM WRC-1750GHBK all versions —
ELECOM WRC-1167GHBK2 all versions —
ELECOM WRC-1750GHBK2-I all versions —
ELECOM WRC-1750GHBK-E all versions —

References