Lucene search
HistoryFeb 28, 2024 - 11:15 p.m.
CVE-2024-25579
cve-2024-25579
elecom
wireless lan routers
os command injection
network-adjacent attacker
administrative privilege
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit “WMC-2LX-B”.
Affected configurations
Node
elecomwrc-1167gs2-bMatch1.67
elecomwrc-1167gs2h-bMatch1.67
elecomwrc-2533gs2-bMatch1.62
elecomwrc-2533gs2-wMatch1.62
elecomwrc-1167fs-bMatch1.62
elecomwrc-1167fs-bMatch1.25
elecomwrc-1167fs-wMatch1.24
elecomwmc-dlgst2-wMatch1.41
| Vendor | Product | Version | CPE |
|---|---|---|---|
| elecom | wrc\-1167gs2\-b | 1.67 | cpe:2.3:h:elecom:wrc\-1167gs2\-b:1.67:*:*:*:*:*:*:* |
| elecom | wrc\-1167gs2h\-b | 1.67 | cpe:2.3:h:elecom:wrc\-1167gs2h\-b:1.67:*:*:*:*:*:*:* |
| elecom | wrc\-2533gs2\-b | 1.62 | cpe:2.3:h:elecom:wrc\-2533gs2\-b:1.62:*:*:*:*:*:*:* |
| elecom | wrc\-2533gs2\-w | 1.62 | cpe:2.3:h:elecom:wrc\-2533gs2\-w:1.62:*:*:*:*:*:*:* |
| elecom | wrc\-1167fs\-b | 1.62 | cpe:2.3:h:elecom:wrc\-1167fs\-b:1.62:*:*:*:*:*:*:* |
| elecom | wrc\-1167fs\-b | 1.25 | cpe:2.3:h:elecom:wrc\-1167fs\-b:1.25:*:*:*:*:*:*:* |
| elecom | wrc\-1167fs\-w | 1.24 | cpe:2.3:h:elecom:wrc\-1167fs\-w:1.24:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-1167GS2-B",
"versions": [
{
"version": "v1.67 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-1167GS2H-B",
"versions": [
{
"version": "v1.67 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2-B",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2-W",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-2533GS2V-B",
"versions": [
{
"version": "v1.62 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-X3200GST3-B",
"versions": [
{
"version": "v1.25 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WRC-G01-W",
"versions": [
{
"version": "v1.24 and earlier",
"status": "affected"
}
]
},
{
"vendor": "ELECOM CO.,LTD.",
"product": "WMC-X1800GST-B",
"versions": [
{
"version": "v1.41 and earlier",
"status": "affected"
}
]
}
]Related
prion
prion
Command injection
2024-02-28 23:15:00
cvelist
cvelist
CVE-2024-25579
2024-02-28 23:08:49
nvd
nvd
CVE-2024-25579
2024-02-28 23:15:09