CVE-2024-22372
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.8%
probabilidade de exploração
0.8%top 46% das CVEs
exploração observada
nãonenhuma fonte reporta
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product.
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
ELECOM CO.,LTD. · WRC-X1500GSA-BELECOM CO.,LTD. · WRC-X1500GS-BELECOM CO.,LTD. · WRC-X1800GSA-BELECOM CO.,LTD. · WRC-X1800GS-BELECOM CO.,LTD. · WRC-X1800GSH-BELECOM CO.,LTD. · WRC-X3000GS2A-BELECOM CO.,LTD. · WRC-X3000GS2-BELECOM CO.,LTD. · WRC-X3000GS2-WELECOM CO.,LTD. · WRC-X3000GST2-BELECOM CO.,LTD. · WRC-X6000QSA-GELECOM CO.,LTD. · WRC-X6000QS-GELECOM CO.,LTD. · WRC-X6000XS-GELECOM CO.,LTD. · WRC-X6000XST-GELECOM CO.,LTD. · WRC-XE5400GSA-GELECOM CO.,LTD. · WRC-XE5400GS-G