CVE-2023-37561

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12...

CVE-2023-37566

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and...

CVE-2023-37567

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port of the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A...

Open redirect

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12...

Command injection

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and...

Command injection

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port of the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A...

CVE-2023-37568

ELECOM wireless LAN routers WRC-1167GHBK-S v1.03 and earlier, and WRC-1167GEBK-S v1.03 and earlier allow a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page...

CVE-2023-37568

CVE-2023-37568 affects ELECOM wireless LAN routers WRC-1167GHBK-S (v1.03 and earlier) and WRC-1167GEBK-S (v1.03 and earlier). The vulnerability is a command injection via the router’s web management page that allows a network-adjacent, authenticated attacker to execute arbitrary commands. Exploit...

CVE-2023-37567

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port of the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A...

CVE-2023-37567

CVE-2023-37567 affects ELECOM and LOGITEC wireless LAN routers. The vulnerability is a remote, unauthenticated command injection via a crafted request to a port on the web management page. Affected ELECOM models/versions: WRC-1167GHBK3-A v1.24 and earlier; WRC-F1167ACF2 (all versions); WRC-600GHB...

CVE-2023-37567

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port of the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A...

CVE-2023-37566

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and...

CVE-2023-37566

CVE-2023-37566 affects ELECOM and LOGITEC wireless LAN routers. A network-adjacent authenticated attacker can trigger a command execution vulnerability via the web management page. Affected devices/versions include ELECOM WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1...

CVE-2023-37566

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and...

CVE-2023-37561

CVE-2023-37561 Open Redirect affecting ELECOM wireless LAN devices: WRH-300WH-H (v2.12 and earlier), WTC-300HWH (v1.09 and earlier), WTC-C1167GC-B (v1.17 and earlier), and WTC-C1167GC-W (v1.17 and earlier). A remote, unauthenticated attacker can cause users to be redirected to arbitrary websites ...

CVE-2023-37561

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12...

JVN#05223215: Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters

Wireless LAN routers and wireless LAN repeaters provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2023-37560 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

MediaTek Chipsets 输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a possible system crash due to an uncaught exception in the wlan firmware, which could lead to a remote denial of service...

PT-2023-19829 · Qualcomm · Qm215 Firmware +147

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the WLAN HOST when it parses a QMI WLAN Firmware response message. Recommendations: At the moment, there is no...

PT-2023-21790 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN HOST affected versions not specified Description: The issue is related to memory corruption in the WLAN HOST when fetching TX status information. Recommendations: At the moment, there is no information about a newer version that contains...