CVE-2023-35991

🗓️ 18 Aug 2023 09:37:37Reported by jpcertType

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows unauthenticated attacker to execute arbitrary OS command

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-35991	18 Aug 202314:38	–	circl
CNNVD	Logitec LAN 安全漏洞	18 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-35991	18 Aug 202309:37	–	cvelist
EUVD	EUVD-2023-39975	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in ELECOM and LOGITEC network devices	15 Aug 202302:54	–	jvn
NVD	CVE-2023-35991	18 Aug 202310:15	–	nvd
Prion	Denial of service	18 Aug 202310:15	–	prion
Positive Technologies	PT-2023-25407 · Logitech · Logitec Lan-Wh300An/Dgp +3	18 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-35991	23 May 202503:59	–	redhatcve
Vulnrichment	CVE-2023-35991	18 Aug 202309:37	–	vulnrichment

NVD

Node

elecom lan-wh300andgpe_firmware

AND

elecom lan-wh300andgpeMatch-

Node

elecom lan-wh300n/dgp_firmware

AND

elecom lan-wh300n/dgpMatch-

Node

elecom lan-wh300an/dgp_firmware

AND

elecom lan-wh300an/dgpMatch-

Node

elecom lan-wh450n/gp_firmware

AND

elecom lan-wh450n/gpMatch-

Node

elecom lan-w300n/p_firmware

AND

elecom lan-w300n/pMatch-

Node

elecom lan-wh300n/dr_firmware

AND

elecom lan-wh300n/drMatch-

Node

elecom lan-w300n/dr_firmware

AND

elecom lan-w300n/drMatch-

[
  {
    "vendor": "LOGITEC CORPORATION",
    "product": "LAN-W300N/DR",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "LOGITEC CORPORATION",
    "product": "LAN-WH300N/DR",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "LOGITEC CORPORATION",
    "product": "LAN-W300N/P",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "LOGITEC CORPORATION",
    "product": "LAN-WH450N/GP",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "LOGITEC CORPORATION",
    "product": "LAN-WH300AN/DGP",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "LOGITEC CORPORATION",
    "product": "LAN-WH300N/DGP",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "LOGITEC CORPORATION",
    "product": "LAN-WH300ANDGPE",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU91630351/
elecom	www.elecom.co.jp/news/security/20230810-01/

21 Nov 2024 08:09Current

9.6High risk

Vulners AI Score9.6

CVSS 3.18.8 - 9.8

EPSS0.0042

SSVC