CVE-2023-40072

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request...

CVE-2023-40072

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request...

CVE-2023-40072

CVE-2023-40072 is an OS command injection in ELECOM wireless LAN access point devices. An authenticated user can send a specially crafted request to execute arbitrary OS commands on affected devices. Reported affected products include ELECOM WAB-S600-PS and WAB-S300 (all versions) with broader EL...

CVE-2023-40069

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions,...

CVE-2023-40069

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions,...

CVE-2023-40069

CVE-2023-40069 affects ELECOM WRC-F1167ACF, WRC-1750GHBK, WRC-1167GHBK2, WRC-1750GHBK2-I, and WRC-1750GHBK-E all versions. It is an OS command injection vulnerability in ELECOM wireless LAN routers allowing an attacker who can access the product to execute arbitrary OS commands by sending a speci...

CVE-2023-39944

OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request...

CVE-2023-39944

OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request...

CVE-2023-39944

CVE-2023-39944 affects ELECOM WRC-F1167ACF and WRC-1750GHBK (all versions) and allows an attacker who can access the device to execute arbitrary OS commands by sending a specially crafted request. The issue is described as an OS command injection vulnerability; the root cause and affected softwar...

CVE-2023-39455

OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all...

CVE-2023-39455

CVE-2023-39455 is an OS command injection affecting ELECOM WRC-600GHBK-A, WRC-1467GHBK-A, WRC-1900GHBK-A, WRC-733FEBK2-A, WRC-F1167ACF2, WRC-1467GHBK-S, and WRC-1900GHBK-S. Affected versions are all versions for these models; an authenticated user can trigger arbitrary OS commands by sending a sp...

CVE-2023-38576

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console...

CVE-2023-39416

Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands...

PT-2023-23922 · Unknown · Lan-W300N/Pr5 +1

Name of the Vulnerable Software and Affected Versions: LAN-W300N/RS all versions LAN-W300N/PR5 all versions Description: A hidden functionality vulnerability allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Recommendations...

PT-2023-29114 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200L version EN V9.3.5u.6146 B20201023 Description: A critical issue affects the setWanCfg function, leading to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

PT-2023-27248 · Elecom · Elecom Wireless Access Points

Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN access point devices affected versions not specified WAB-S600-PS all versions WAB-S300 all versions Description: The issue allows an authenticated user to execute an arbitrary OS command by sending a specially crafted...

JVN#19661362: Multiple vulnerabilities in Proself

Proself provided by North Grid Corporation is an online storage server software. Proself contains multiple vulnerabilities listed below. Improper authentication CWE-287 - CVE-2023-39415 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| Base Score: 7.5 CVSS...

PT-2023-26957 · Elecom · Elecom Wrc-1900Ghbk-S +6

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-600GHBK-A all versions ELECOM WRC-1467GHBK-A all versions ELECOM WRC-1900GHBK-A all versions ELECOM WRC-733FEBK2-A all versions ELECOM WRC-F1167ACF2 all versions ELECOM WRC-1467GHBK-S all versions ELECOM WRC-1900GHBK-S all versions...

PT-2023-27246 · Elecom · Elecom Wrc-F1167Acf +3

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-F1167ACF all versions ELECOM WRC-1750GHBK all versions ELECOM WRC-1167GHBK2 all versions ELECOM WRC-1750GHBK2-I all versions ELECOM WRC-1750GHBK-E all versions Description: An OS command injection vulnerability in ELECOM wireless L...

Multiple vulnerabilities in ELECOM and LOGITEC network devices

Overview Multiple network devices provided by ELECOM CO.,LTD. and LOGITEC CORPORATION contain multiple vulnerabilities listed below. Hidden Functionality CWE-912 - CVE-2023-32626, CVE-2023-35991, CVE-2023-39445 Telnet service access restriction failure CWE-284 - CVE-2023-38132 Hidden Functionalit...