CVE-2023-40069criticalCWE-78

CVE-2023-40069: critical vulnerability in ELECOM CO.,LTD. WRC-F1167ACF

Published · Updated

Follow this CVE+ Monitor WRC-1750GHBK+ Monitor WRC-F1167ACF

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.5%
OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
ELECOM CO.,LTD. · WRC-1167GHBK2ELECOM CO.,LTD. · WRC-1750GHBKELECOM CO.,LTD. · WRC-1750GHBK2-IELECOM CO.,LTD. · WRC-1750GHBK-EELECOM CO.,LTD. · WRC-F1167ACF
Related CVEs — ELECOM CO.,LTD. WRC-F1167ACF

In the same product, most dangerous first.

CVE-2023-39944—CVE-2023-39944EPSS 1.5%CVE-2023-43757—CVE-2023-43757EPSS 0.5%