CVE-2024-25568highCWE-78

CVE-2024-25568: falha de alta gravidade em ELECOM CO.,LTD. WRC-X3200GST3-B

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar WMC-X1800GST-B+ Monitorar WRC-G01-W

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 1.1%
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X3200GST3-B v1.25 and earlier, WRC-G01-W v1.24 and earlier, and WMC-X1800GST-B v1.41 and earlier. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B".
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
ELECOM CO.,LTD. · WMC-X1800GST-BELECOM CO.,LTD. · WRC-G01-WELECOM CO.,LTD. · WRC-X3200GST3-B
CVEs relacionadas — ELECOM CO.,LTD. WRC-X3200GST3-B

No mesmo produto, das mais perigosas para as menos.

CVE-2024-21798MEDIUMCVE-2024-21798EPSS 1.3%CVE-2023-39454HIGHCVE-2023-39454EPSS 0.9%CVE-2024-25579MEDIUMCVE-2024-25579EPSS 0.8%CVE-2024-26258HIGHCVE-2024-26258EPSS 0.7%CVE-2024-34021MEDIUMCVE-2024-34021EPSS 0.4%CVE-2024-29225MEDIUMCVE-2024-29225EPSS 0.3%