Description
WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to WebGUI.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ELECOM | WRC-BE36QS-B | v1.1.3 and earlier | — |
| ELECOM | WRC-W701-B | v1.1.3 and earlier | — |