CVE-2024-22372
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 0.8%
exploitation probability
0.8%top 46% of all CVEs
observed exploitation
nono source reports it
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product.
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
ELECOM CO.,LTD. · WRC-X1500GSA-BELECOM CO.,LTD. · WRC-X1500GS-BELECOM CO.,LTD. · WRC-X1800GSA-BELECOM CO.,LTD. · WRC-X1800GS-BELECOM CO.,LTD. · WRC-X1800GSH-BELECOM CO.,LTD. · WRC-X3000GS2A-BELECOM CO.,LTD. · WRC-X3000GS2-BELECOM CO.,LTD. · WRC-X3000GS2-WELECOM CO.,LTD. · WRC-X3000GST2-BELECOM CO.,LTD. · WRC-X6000QSA-GELECOM CO.,LTD. · WRC-X6000QS-GELECOM CO.,LTD. · WRC-X6000XS-GELECOM CO.,LTD. · WRC-X6000XST-GELECOM CO.,LTD. · WRC-XE5400GSA-GELECOM CO.,LTD. · WRC-XE5400GS-G