CVE-2024-22372

🗓️ 24 Jan 2024 04:38:20Reported by jpcertType

OS command injection vuln in ELECOM wireless LAN routers allows network-adjacent attacker to execute arbitrary command

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2024-22372	24 Jan 202405:15	–	attackerkb
Circl	CVE-2024-22372	24 Jan 202406:26	–	circl
CNNVD	ELECOM wireless LAN routers OS Command Injection Vulnerability	23 Jan 202400:00	–	cnnvd
Cvelist	CVE-2024-22372	24 Jan 202404:38	–	cvelist
EUVD	EUVD-2024-19929	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	ELECOM wireless LAN routers vulnerable to OS command injection	24 Jan 202408:16	–	jvn
NVD	CVE-2024-22372	24 Jan 202405:15	–	nvd
OSV	CVE-2024-22372	24 Jan 202405:15	–	osv
Prion	Command injection	24 Jan 202405:15	–	prion
Positive Technologies	PT-2024-19371 · Elecom · Elecom Wireless Lan Routers	23 Jan 202400:00	–	ptsecurity

NVD

Vulners

Node

elecom wrc-x1800gs-b_firmwareRange<1.18

AND

elecom wrc-x1800gs-bMatch-

Node

elecom wrc-x1800gsh-b_firmwareRange<1.18

AND

elecom wrc-x1800gsh-bMatch-

Node

elecom wrc-x1800gsa-b_firmwareRange<1.18

AND

elecom wrc-x1800gsa-bMatch-

Node

elecom wrc-x6000xs-g_firmwareMatch1.09

AND

elecom wrc-x6000xs-gMatch-

Node

elecom wrc-x6000xst-g_firmwareRange<1.14

AND

elecom wrc-x6000xst-gMatch-

[
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X1500GS-B",
    "versions": [
      {
        "version": "v1.11 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X1500GSA-B",
    "versions": [
      {
        "version": "v1.11 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X1800GS-B",
    "versions": [
      {
        "version": "v1.17 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X1800GSA-B",
    "versions": [
      {
        "version": "v1.17 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X1800GSH-B",
    "versions": [
      {
        "version": "v1.17 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X3000GS2-B",
    "versions": [
      {
        "version": "v1.08 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X3000GS2-W",
    "versions": [
      {
        "version": "v1.08 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X3000GS2A-B",
    "versions": [
      {
        "version": "v1.08 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-XE5400GS-G",
    "versions": [
      {
        "version": "v1.12 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-XE5400GSA-G",
    "versions": [
      {
        "version": "v1.12 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X6000QS-G",
    "versions": [
      {
        "version": "v1.13 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X6000QSA-G",
    "versions": [
      {
        "version": "v1.13 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X6000XS-G",
    "versions": [
      {
        "version": "v1.09",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X6000XST-G",
    "versions": [
      {
        "version": "v1.12 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRC-X3000GST2-B",
    "versions": [
      {
        "version": "v1.06 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
elecom	www.elecom.co.jp/news/security/20240123-01/
jvn	www.jvn.jp/en/vu/JVNVU90908488/

12 May 2026 08:10Current

7.1High risk

Vulners AI Score7.1

CVSS 3.16.8

CVSS 36.8

EPSS0.00173

SSVC

CWE-78