Lucene search
JpcertCVE-2023-37562HistoryJul 13, 2023 - 3:15 a.m.
CVE-2023-37562
2023-07-1303:15:09
CWE-352
jpcert
web.nvd.nist.gov
16
cve-2023-37562
csrf
vulnerability
wtc-c1167gc-b
wtc-c1167gc-w
security
nvd
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
27.0%
Cross-site request forgery (CSRF) vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier. If a user views a malicious page while logged in, unintended operations may be performed.
Affected configurations
Node
elecomwtc-c1167gc-b_firmwareRange≤1.17
elecomwtc-c1167gc-bMatch-
Node
elecomwtc-c1167gc-w_firmwareRange≤1.17
elecomwtc-c1167gc-wMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| elecom | wtc-c1167gc-b_firmware | * | cpe:2.3:o:elecom:wtc-c1167gc-b_firmware:*:*:*:*:*:*:*:* |
| elecom | wtc-c1167gc-b | - | cpe:2.3:h:elecom:wtc-c1167gc-b:-:*:*:*:*:*:*:* |
| elecom | wtc-c1167gc-w_firmware | * | cpe:2.3:o:elecom:wtc-c1167gc-w_firmware:*:*:*:*:*:*:*:* |
| elecom | wtc-c1167gc-w | - | cpe:2.3:h:elecom:wtc-c1167gc-w:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "ELECOM CO.,LTD.",
"product": "WTC-C1167GC-B",
"versions": [
{
"version": "v1.17 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WTC-C1167GC-W",
"versions": [
{
"version": "v1.17 and earlier",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2023-37562
2023-07-13 03:15:09
prion
prion
Cross site request forgery (csrf)
2023-07-13 03:15:00
cvelist
cvelist
CVE-2023-37562
2023-07-13 02:55:50
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
27.0%
Related for CVE-2023-37562