CVE-2023-37561

🗓️ 13 Jul 2023 01:20:06Reported by jpcertType

Open redirect vuln in ELECOM WiFi routers & repeaters allows attacker to conduct phishing attacks via crafted URL. Affected products: WRH-300WH-H v2.12, WTC-300HWH v1.09, WTC-C1167GC-B v1.17, WTC-C1167GC-W v1.1

Reporter	Title	Published	Views	Family All 11
CNNVD	ELECOM WRH 输入验证错误漏洞	11 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-37561	13 Jul 202301:20	–	cvelist
EUVD	EUVD-2023-41447	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#05223215: Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters	11 Jul 202300:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters	11 Jul 202306:37	–	jvn
NVD	CVE-2023-37561	13 Jul 202302:15	–	nvd
OSV	CVE-2023-37561	13 Jul 202302:15	–	osv
Prion	Open redirect	13 Jul 202302:15	–	prion
Positive Technologies	PT-2023-26019 · Elecom · Elecom Wtc-C1167Gc-W +3	13 Jul 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-37561	23 May 202504:49	–	redhatcve

NVD

Vulners

Node

elecom wrh-300wh-h_firmwareRange≤2.12

AND

elecom wrh-300wh-hMatch-

Node

elecom wtc-300hwh_firmwareRange≤1.09

AND

elecom wtc-300hwhMatch-

Node

elecom wtc-c1167gc-b_firmwareRange≤1.17

AND

elecom wtc-c1167gc-bMatch-

Node

elecom wtc-c1167gc-w_firmwareRange≤1.17

AND

elecom wtc-c1167gc-wMatch-

[
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRH-300WH-H",
    "versions": [
      {
        "version": "v2.12 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WTC-300HWH",
    "versions": [
      {
        "version": "v1.09 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WTC-C1167GC-B",
    "versions": [
      {
        "version": "v1.17 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WTC-C1167GC-W",
    "versions": [
      {
        "version": "v1.17 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
elecom	www.elecom.co.jp/news/security/20230711-01/
jvn	www.jvn.jp/en/jp/JVN05223215/

21 Nov 2024 08:11Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.1

EPSS0.00478

SSVC

CWE-601