Description

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request.

Related CPE's

h

elecom

wab-s600-ps

-

o

elecom

wab-s600-ps_firmware

Vulnerable

h

elecom

wab-s300

-

o

elecom

wab-s300_firmware

Vulnerable

References

https://jvn.jp/en/vu/JVNVU91630351/

Third Party Advisory

https://www.elecom.co.jp/news/security/20230810-01/

Vendor Advisory

https://www.elecom.co.jp/news/security/20231114-01/

Weaknesses

[email protected]

Primary
CWE-78

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-18T10:15:12.847

1 year ago

Last modified

2024-09-09T07:15:14.470

1 month ago