Description
ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processing a crafted request sent by a logged-in user, an arbitrary OS command may be executed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ELECOM | WRC-BE72XSD-B | v1.1.1 and earlier | — |
| ELECOM | WRC-BE72XSD-BA | v1.1.1 and earlier | — |
| ELECOM | WRC-BE65QSD-B | v1.1.0 and earlier | — |
| ELECOM | WRC-W702-B | v1.1.0 and earlier | — |