PT-2023-26026 · Elecom · Wrc-1167Gebk-S

·

CVE-2023-37568

·

Publicado

2023-07-13

·

Atualizado

2023-07-25

CVSS v3.1

8.0

Alta

VetorAV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ELECOM wireless LAN routers WRC-1167GHBK-S versions 1.03 and earlier ELECOM wireless LAN routers WRC-1167GEBK-S versions 1.03 and earlier
Description The issue allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page.
Recommendations For ELECOM wireless LAN routers WRC-1167GHBK-S versions 1.03 and earlier, consider restricting access to the web management page until a patch is available. For ELECOM wireless LAN routers WRC-1167GEBK-S versions 1.03 and earlier, consider restricting access to the web management page until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-37568

Produtos afetados

Wrc-1167Gebk-S