CVE-2023-37566

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and...

CVE-2023-37561

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12...

CVE-2023-37561

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12...

CVE-2023-37561

CVE-2023-37561 Open Redirect affecting ELECOM wireless LAN devices: WRH-300WH-H (v2.12 and earlier), WTC-300HWH (v1.09 and earlier), WTC-C1167GC-B (v1.17 and earlier), and WTC-C1167GC-W (v1.17 and earlier). A remote, unauthenticated attacker can cause users to be redirected to arbitrary websites ...

PT-2023-26026 · Elecom · Wrc-1167Gebk-S

Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN routers WRC-1167GHBK-S versions 1.03 and earlier ELECOM wireless LAN routers WRC-1167GEBK-S versions 1.03 and earlier Description: The issue allows a network-adjacent authenticated attacker to execute an arbitrary command ...

PT-2023-26019 · Elecom · Elecom Wtc-C1167Gc-W +3

Name of the Vulnerable Software and Affected Versions: ELECOM WRH-300WH-H versions 2.12 and earlier ELECOM WTC-300HWH versions 1.09 and earlier ELECOM WTC-C1167GC-B versions 1.17 and earlier ELECOM WTC-C1167GC-W versions 1.17 and earlier Description: The issue allows a remote unauthenticated...

PT-2023-26021 · Elecom · Elecom Wrc-1167Febk-A +11

Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN routers versions v1.03 and earlier ELECOM WRC-1167GHBK-S versions v1.03 and earlier ELECOM WRC-1167GEBK-S versions v1.03 and earlier ELECOM WRC-1167FEBK-S versions v1.04 and earlier ELECOM WRC-1167GHBK3-A versions v1.24 an...

PT-2023-26025 · Elecom +1 · Elecom Wrc-1900Ghbk-A +7

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-1167GHBK3-A versions 1.24 and earlier ELECOM WRC-F1167ACF2 all versions ELECOM WRC-600GHBK-A all versions ELECOM WRC-733FEBK2-A all versions ELECOM WRC-1467GHBK-A all versions ELECOM WRC-1900GHBK-A all versions ELECOM LAN-W301NR al...

PT-2023-26024 · Elecom +1 · Elecom Wrc-1167Febk-A +8

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-1167GHBK3-A versions 1.24 and earlier ELECOM WRC-1167FEBK-A versions 1.18 and earlier ELECOM WRC-F1167ACF2 all versions ELECOM WRC-600GHBK-A all versions ELECOM WRC-733FEBK2-A all versions ELECOM WRC-1467GHBK-A all versions ELECOM...

ELECOM WRC 命令注入漏洞

The ELECOM WRC is a network camera for the home from ELECOM Japan. A command injection vulnerability exists in the ELECOM WRC-1167GHBK-S v1.03 and earlier and WRC-1167GBBK-S v1.03 and earlier, which originates from a vulnerability that allows network-adjacent authenticated attackers to execute...

Multiple vulnerabilities in ELECOM and LOGITEC wireless LAN routers

Overview Multiple wireless LAN routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION contain multiple vulnerabilities listed below. Command Injection on the web management page CWE-77 - CVE-2023-37566, CVE-2023-37568 Command Injection on a certain port of the web management page CWE-77 -...

ELECOM WRH 输入验证错误漏洞

ELECOM WRH is a webcam for the home from ELECOM Japan. An input validation error vulnerability exists in ELECOM WRH-300WH-H v2.12 and earlier versions, which stems from the presence of an open redirection, where a user of a website using the affected product may be redirected to an arbitrary...

ELECOM WRC 安全漏洞

The ELECOM WRC is a home-ready network camera from ELECOM Japan. A security vulnerability exists in ELECOM WRC-1167FEBK-A v1.18 and earlier versions, which stems from the presence of an information disclosure that could allow network-adjacent attackers with access to the affected product to...

ELECOM WRH 跨站脚本漏洞

ELECOM WRH is a webcam for home use from ELECOM Japan. A security vulnerability exists in ELECOM WRH-300WH-H v2.12 and earlier versions, which stems from the presence of cross-site scripting that can be exploited by an attacker to execute arbitrary scripts on a logged-in user's web browser...

ELECOM WRC 多款产品命令注入漏洞

ELECOM WRC is a home-ready IP camera from ELECOM Japan. Command injection vulnerability exists in ELECOM WRC-1167FEBK-A v1.18 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167GHBK-S v1.03 and earlier, WRC-1167GHBK3-A v1.24 and earlier, which originates from a command injection on a port on ...

JVN#05223215: Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters

Wireless LAN routers and wireless LAN repeaters provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2023-37560 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

ELECOM WRC 代码注入漏洞

The ELECOM WRC is a home-applicable network camera from ELECOM Japan. A code injection vulnerability exists in ELECOM WRC-1167FEBK-A v1.18 and earlier versions, which stems from the presence of a code injection that allows network-adjacent authenticated attackers to execute arbitrary operating...

ELECOM WRC 命令注入漏洞

ELECOM WRC is a home-ready IP camera from ELECOM Japan. Command injection vulnerability exists in ELECOM WRC-1167FEBK-A v1.18 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167GHBK-S v1.03 and earlier, WRC-1167GHBK3-A v1.24 and earlier, which originates from the presence of a command injecti...

ELECOM WTC-C1167GC-B 跨站请求伪造漏洞

The ELECOM WTC is a repeater from ELECOM Japan. A security vulnerability exists in ELECOM WTC-C1167GC-B v1.17 and earlier versions, which stems from the presence of cross-site request forgery and may allow users to perform unexpected actions if they view a malicious page while logged in...

ELECOM WAB-MAT registers its windows service executable with an unquoted file path

Overview WAB-MAT provided by ELECOM CO.,LTD. is Access Point Management Tool for corporate users. WAB-MAT registers its windows service executable with an unquoted file path CWE-428. Tomohisa Hasegawa of Canon IT Solutions Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...