CVE-2023-39455

CVE-2023-39455: vulnerability in ELECOM CO.,LTD. WRC-600GHBK-A

Published · Updated

Follow this CVE+ Monitor WRC-1467GHBK-A+ Monitor WRC-1900GHBK-A

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.
Affected products
ELECOM CO.,LTD. · WRC-1467GHBK-AELECOM CO.,LTD. · WRC-1467GHBK-SELECOM CO.,LTD. · WRC-1900GHBK-AELECOM CO.,LTD. · WRC-1900GHBK-SELECOM CO.,LTD. · WRC-600GHBK-AELECOM CO.,LTD. · WRC-733FEBK2-AELECOM CO.,LTD. · WRC-F1167ACF2
Related CVEs — ELECOM CO.,LTD. WRC-600GHBK-A

In the same product, most dangerous first.

CVE-2023-37567—CVE-2023-37567EPSS 2.4%CVE-2023-37566—CVE-2023-37566EPSS 1.1%CVE-2021-20644—CVE-2021-20644EPSS 0.6%CVE-2023-37563—CVE-2023-37563EPSS 0.3%