Elecom ELECOM WRC-300FEBK-S 跨站请求伪造漏洞

The ELECOM WRC-300FEBK-S is a wireless access device. A cross-site request forgery vulnerability exists in the ELECOM WRC-300FEBK-S, which can be exploited by an attacker to submit a special request, alter the communication response, and execute arbitrary OS commands in the application context...

Elecom ELECOM WRC-300FEBK-S 信任管理问题漏洞

The ELECOM WRC-300FEBK-S is a network camera for the home from Elecom Japan. A certificate validation error vulnerability exists in the ELECOM WRC-300FEBK-S, which can be exploited by an attacker to alter the communication response and execute arbitrary commands on the product...

Elecom NCC-EWF100RMWH2 跨站请求伪造漏洞

The ELECOM NCC-EWF100RMWH2 is a wireless access device. The ELECOM NCC-EWF100RMWH2 suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, and perform a malicious operation in the context of the target user...

CVE-2020-5634

ELECOM LAN routers WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10 allow an attacker on the same network segment to execute arbitrary OS commands with a...

CVE-2020-5634

ELECOM LAN routers WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10 allow an attacker on the same network segment to execute arbitrary OS commands with a...

Design/Logic Flaw

ELECOM LAN routers WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10 allow an attacker on the same network segment to execute arbitrary OS commands with a...

CVE-2020-5634

ELECOM LAN routers WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10 allow an attacker on the same network segment to execute arbitrary OS commands with a...

CVE-2020-5634

ELECOM LAN routers WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10 allow an attacker on the same network segment to execute arbitrary OS commands with a...

CVE-2020-5634

CVE-2020-5634 affects ELECOM LAN routers (WRC-2533GST2, WRC-1900GST2, WRC-1750GST2, WRC-1167GST2). The root cause is an OS command injection vulnerability that allows a remote attacker on the same network segment to execute arbitrary commands with root privileges via unspecified vectors. Affected...

PT-2020-18601

Name of the Vulnerable Software and Affected Versions ELECOM LAN routers versions prior to v1.14 WRC-2533GST2, WRC-1900GST2, WRC-1750GST2 ELECOM LAN routers WRC-1167GST2 version prior to v1.10 Description The issue allows an attacker on the same network segment to execute arbitrary OS commands wi...

CVE-2020-5634: Undefined Security Weakness

ELECOM LAN routers WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10 allow an attacker on the same network segment to execute arbitrary OS commands with a...

OS command injection vulnerability in multiple ELECOM LAN routers

Overview Multiple ELECOM LAN routers provided by ELECOM CO.,LTD. contain an OS command injection vulnerability CWE-78. Katsuhiko Satoa.k.a. gorohkun of 00One, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

JVN#82892096: OS command injection vulnerability in multiple ELECOM LAN routers

Multiple ELECOM LAN routers provided by ELECOM CO.,LTD. contain an OS command injection vulnerability CWE-78. Impact A remote attacker who can access the management screen of the affected device may execute an arbitrary OS command with root privilege. Solution Apply the appropriate firmware updat...