Description

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.

Related CPE's

o

elecom

wrc-1467ghbk-a_firmware

Vulnerable

h

elecom

wrc-1467ghbk-a

-

o

elecom

wrc-1467ghbk-s_firmware

Vulnerable

h

elecom

wrc-1467ghbk-s

-

o

elecom

wrc-1900ghbk-a_firmware

Vulnerable

h

elecom

wrc-1900ghbk-a

-

o

elecom

wrc-1900ghbk-s_firmware

Vulnerable

h

elecom

wrc-1900ghbk-s

-

o

elecom

wrc-600ghbk-a_firmware

Vulnerable

h

elecom

wrc-600ghbk-a

-

o

elecom

wrc-733febk2-a_firmware

Vulnerable

h

elecom

wrc-733febk2-a

-

o

elecom

wrc-f1167acf2_firmware

Vulnerable

h

elecom

wrc-f1167acf2

-

References

https://jvn.jp/en/vu/JVNVU91630351/

Third Party Advisory

https://www.elecom.co.jp/news/security/20230810-01/

Vendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-Other

CVSS impact metrics

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2023-08-18T10:15:12.037

11 months ago

Last modified

2023-08-24T18:30:33.000

11 months ago