CVE-2023-37561

CVE-2023-37561: vulnerability in ELECOM CO.,LTD. WRH-300WH-H

Published · Updated

Follow this CVE+ Monitor WRH-300WH-H+ Monitor WTC-300HWH

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12 and earlier, WTC-300HWH v1.09 and earlier, WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier.
Affected products
ELECOM CO.,LTD. · WRH-300WH-HELECOM CO.,LTD. · WTC-300HWHELECOM CO.,LTD. · WTC-C1167GC-BELECOM CO.,LTD. · WTC-C1167GC-W
Related CVEs — ELECOM CO.,LTD. WRH-300WH-H

In the same product, most dangerous first.

CVE-2023-37560—CVE-2023-37560EPSS 0.5%CVE-2023-43757—CVE-2023-43757EPSS 0.5%CVE-2023-37562—CVE-2023-37562EPSS 0.3%