CVE-2023-40072

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request...

CVE-2023-40069

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions,...

CVE-2023-40069

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions,...

CVE-2023-40069

CVE-2023-40069 affects ELECOM WRC-F1167ACF, WRC-1750GHBK, WRC-1167GHBK2, WRC-1750GHBK2-I, and WRC-1750GHBK-E all versions. It is an OS command injection vulnerability in ELECOM wireless LAN routers allowing an attacker who can access the product to execute arbitrary OS commands by sending a speci...

CVE-2023-39455

OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all...

CVE-2023-39455

CVE-2023-39455 is an OS command injection affecting ELECOM WRC-600GHBK-A, WRC-1467GHBK-A, WRC-1900GHBK-A, WRC-733FEBK2-A, WRC-F1167ACF2, WRC-1467GHBK-S, and WRC-1900GHBK-S. Affected versions are all versions for these models; an authenticated user can trigger arbitrary OS commands by sending a sp...

CVE-2023-35991

CVE-2023-35991 affects LOGITEC LAN-W300N/DR, LAN-WH300N/DR, LAN-W300N/P, LAN-WH450N/GP, LAN-WH300AN/DGP, LAN-WH300N/DGP, and LAN-WH300ANDGPE. It is a hidden functionality vulnerability allowing an unauthenticated attacker to log in to a management console and execute arbitrary OS commands. The is...

CVE-2023-35991

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions,...

CVE-2023-35991

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions,...

ELECOM wireless LAN routers 操作系统命令注入漏洞

ELECOM wireless LAN routers are a series of routers from ELECOM Japan. The ELECOM wireless LAN routers are vulnerable to an operating system command injection vulnerability that stems from the presence of an operating system command injection vulnerability. An attacker could exploit this...

ELECOM多款产品 安全漏洞

ELECOM WRC-X1800GS-B and others are products of ELECOM Japan.ELECOM WRC-X1800GS-B is a wireless router.ELECOM WRC-X1800GSA-B is a wireless router.ELECOM WRC-X1800GSH-B is a Gigabit router. A security vulnerability exists in various ELECOM products, which stems from a vulnerability that allows an...

ELECOM wireless LAN routers 操作系统命令注入漏洞

ELECOM wireless LAN routers are a family of routers from ELECOM Japan. An operating system command injection vulnerability exists in ELECOM wireless LAN routers that originates from allowing an authenticated user to execute arbitrary operating system commands by sending a specially crafted reques...

MOXA NPort IAW5000A-I/O Series Hard-Coded Credential Vulnerability

MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, China. The server enables the integration of field serial devices with wireless Ethernet networks and incorporates digital IOs for industrial data acquisition applications. A hard-coded...

PT-2023-27248 · Elecom · Elecom Wireless Access Points

Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN access point devices affected versions not specified WAB-S600-PS all versions WAB-S300 all versions Description: The issue allows an authenticated user to execute an arbitrary OS command by sending a specially crafted...

CVE-2023-38902

A command injection vulnerability in RG-EW series home routers and repeaters v.EW3.01B11P219, RG-NBS and RG-S1930 series switches v.SWITCH3.01B11P219, RG-EG series business VPN routers v.EG3.01B11P219, EAP and RAP series wireless access points v.AP3.01B11P219, and NBC series wireless controllers...

CVE-2023-38902

A command injection vulnerability in RG-EW series home routers and repeaters v.EW3.01B11P219, RG-NBS and RG-S1930 series switches v.SWITCH3.01B11P219, RG-EG series business VPN routers v.EG3.01B11P219, EAP and RAP series wireless access points v.AP3.01B11P219, and NBC series wireless controllers...

The vulnerability of the Windows Wireless Wide Area Network Service (WwanSvc) allows a hacker to compromise the protected information.

The vulnerability of the Windows Wireless Wide Area Network Service WwanSvc operating system is related to the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker to disclose protected information...

OracleVM 3.4 : kernel-uek (OVMSA-2023-0017)

The remote OracleVM system is missing necessary patches to address security updates: - A use-after-free flaw was found in the Linux kernel's Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user ...

MOXA NPort IAW5000A-I/O Series 信任管理问题漏洞

MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, China. The server enables the integration of field serial devices with wireless Ethernet networks and incorporates digital IOs for industrial data acquisition applications. A hard-coded...

Zyxel NBG6604 Command Injection Vulnerability (CNVD-2023-64085)

The Zyxel NBG6604 is a dual-band wireless router from China's Hopkins Zyxel. The Zyxel NBG6604 V1.01ABIR.1C0 suffers from a command injection vulnerability that stems from a failure to properly filter constructed command special characters, commands, etc. in the NTP function. An attacker can...