CVE-2023-37566

CVE-2023-37566: falha em ELECOM CO.,LTD. WRC-1167GHBK3-A

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar WRC-1167GHBK3-A+ Monitorar WRC-1467GHBK-A

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.1%
Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, and LAN-W301NR all versions.
Produtos afetados
ELECOM CO.,LTD. · WRC-1167FEBK-AELECOM CO.,LTD. · WRC-1167GHBK3-AELECOM CO.,LTD. · WRC-1467GHBK-AELECOM CO.,LTD. · WRC-1900GHBK-AELECOM CO.,LTD. · WRC-600GHBK-AELECOM CO.,LTD. · WRC-733FEBK2-AELECOM CO.,LTD. · WRC-F1167ACF2LOGITEC CORPORATION · LAN-W301NR
CVEs relacionadas — ELECOM CO.,LTD. WRC-1167GHBK3-A

No mesmo produto, das mais perigosas para as menos.

CVE-2023-37567—CVE-2023-37567EPSS 2.4%CVE-2023-39455—CVE-2023-39455EPSS 1.5%CVE-2023-37564—CVE-2023-37564EPSS 0.9%CVE-2021-20644—CVE-2021-20644EPSS 0.6%CVE-2023-37565—CVE-2023-37565EPSS 0.5%CVE-2023-37563—CVE-2023-37563EPSS 0.3%