CVE-2023-49695

🗓️ 12 Dec 2023 08:58:47Reported by jpcertType

OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command by sending a specially crafted reques

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-49695	2 Jan 202411:06	–	circl
CNNVD	ELECOM WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and, WRC-X3000GSA v1.0.24 and versions Security Vulnerabilities	12 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-49695	12 Dec 202308:58	–	cvelist
Japan Vulnerability Notes	ELECOM wireless LAN routers vulnerable to OS command injection	13 Dec 202306:06	–	jvn
NVD	CVE-2023-49695	12 Dec 202309:15	–	nvd
OSV	CVE-2023-49695	12 Dec 202309:15	–	osv
Prion	Command injection	12 Dec 202309:15	–	prion
Positive Technologies	PT-2023-31300 · Unknown · Wrc-X3000Gs	12 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-49695	23 May 202504:27	–	redhatcve
Vulnrichment	CVE-2023-49695	12 Dec 202308:58	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

elecom wrc-x3000gsn_firmwareMatch1.0.2

AND

elecom wrc-x3000gsnMatch-

Node

elecom wrc-x3000gs_firmwareRange≤1.0.24

AND

elecom wrc-x3000gsMatch-

Node

elecom wrc-x3000gsa_firmwareRange≤1.0.24

AND

elecom wrc-x3000gsaMatch-

[
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X3000GSN",
    "versions": [
      {
        "version": "v1.0.2",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X3000GS",
    "versions": [
      {
        "version": "v1.0.24 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X3000GSA",
    "versions": [
      {
        "version": "v1.0.24 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU97499577/
elecom	www.elecom.co.jp/news/security/20231212-01/

21 Nov 2024 08:33Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.8

EPSS0.00173

SSVC

CWE-78