CVE-2023-40069

🗓️ 18 Aug 2023 09:44:43Reported by jpcertType

OS command injection vulnerability in ELECOM wireless LAN routers allows arbitrary OS command execution by sending a specially crafted request

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-40069	20 Aug 202316:13	–	circl
CNNVD	ELECOM wireless LAN routers 操作系统命令注入漏洞	18 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-40069	18 Aug 202309:44	–	cvelist
EUVD	EUVD-2023-44676	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in ELECOM and LOGITEC network devices	15 Aug 202302:54	–	jvn
NVD	CVE-2023-40069	18 Aug 202310:15	–	nvd
Prion	Command injection	18 Aug 202310:15	–	prion
Positive Technologies	PT-2023-27246 · Elecom · Elecom Wrc-F1167Acf +3	18 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-40069	9 Jan 202612:29	–	redhatcve
Vulnrichment	CVE-2023-40069	18 Aug 202309:44	–	vulnrichment

NVD

Node

elecom wrc-f1167acf_firmware

AND

elecom wrc-f1167acfMatch-

Node

elecom wrc-1750ghbk_firmware

AND

elecom wrc-1750ghbkMatch-

Node

elecom wrc-1167ghbk2_firmware

AND

elecom wrc-1167ghbk2Match-

Node

elecom wrc-1750ghbk2-i_firmware

AND

elecom wrc-1750ghbk2-iMatch-

Node

elecom wrc-1750ghbk-e_firmware

AND

elecom wrc-1750ghbk-eMatch-

[
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-F1167ACF",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-1750GHBK",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-1167GHBK2",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-1750GHBK2-I",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-1750GHBK-E",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU91630351/
elecom	www.elecom.co.jp/news/security/20230810-01/

21 Nov 2024 08:18Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

EPSS0.01563

SSVC

CWE-78