Description
ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authentication is required.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ELECOM | WRC-BE72XSD-B | v1.1.1 and earlier | — |
| ELECOM | WRC-BE72XSD-BA | v1.1.1 and earlier | — |
| ELECOM | WRC-BE65QSD-B | v1.1.0 and earlier | — |
| ELECOM | WRC-W702-B | v1.1.0 and earlier | — |