Vulnerabilites related to elecom - wrc-1900ghbk-s
var-202308-2595
Vulnerability from variot
OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions. Network equipment provided by ELECOM Co., Ltd. and Logitech Co., Ltd. contains the following multiple vulnerabilities. * Unpublished features (CWE-912) - CVE-2023-32626 , CVE-2023-35991 , CVE-2023-39445 It was * Telnet Inadequate access restrictions to services (CWE-284) - CVE-2023-38132 It was * Unpublished features (CWE-912) - CVE-2023-38576 It was * buffer overflow (CWE-120) - CVE-2023-39454 It was * OS Command injection (CWE-78) - CVE-2023-39455 , CVE-2023-40072 It was * OS Command injection (CWE-78) - CVE-2023-39944 , CVE-2023-40069 This vulnerability information is JPCERT/CC Report to JPCERT/CC Coordinated with the developer. Reporter : Zero Zero One Co., Ltd. Hayakawa Soraya MrThe expected impact depends on each vulnerability, but it may be affected as follows. It was * A third party with access to the product logs into a specific operation screen and performs arbitrary operations. OS Command is executed - CVE-2023-32626 , CVE-2023-35991 It was * by a third party who has access to the product; telnet logged into the service - CVE-2023-38132 It was * A third party who can log in to the product may perform arbitrary actions from a specific operation screen. - CVE-2023-39445 It was * Arbitrary code can be executed by a third party who has access to the product - CVE-2023-39454 It was * A third party who can log in to the product sends a specially crafted request and sends an arbitrary request
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-202308-2595", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "wrc-1467ghbk-a", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-f1167acf2", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-1900ghbk-s", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-1467ghbk-s", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-733febk2-a", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-1900ghbk-a", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-600ghbk-a", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wab-i1750-ps", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-w451ngr", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wrc-1750ghbk", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-1750ghbk-e", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wab-s1167-ps", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-wh300n/re", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wab-m1775-ps", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wab-m2133", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-wh300andgpe", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "lan-w300n/rs", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wrc-1900ghbk-s", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-1900ghbk-a", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wab-s1775", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-w300n/dr", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "lan-wh450n/gp", scope: "eq", trust: 0.8, vendor: "ロジテック株式会社", version: "all s (cve-2023-35991)", }, { model: "wrc-1467ghbk-s", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-1467ghbk-a", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-w300n/p", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "lan-wh300n/dr", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wrc-f1167acf", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-1750ghbk2-i", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-x1800gsa-b", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-f1167acf2", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-x1800gsh-b", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-w300n/pr5", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wrc-600ghbk-a", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-733febk2-a", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-wh300n/dgp", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wab-s1167", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-1167ghbk2", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-x1800gs-b", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wab-s600-ps", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-wh300an/dgp", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wab-s300", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, ], sources: [ { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39455", }, ], }, cve: "CVE-2023-39455", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [], cvssV3: [ { attackComplexity: "LOW", attackVector: "NETWORK", author: "nvd@nist.gov", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", exploitabilityScore: 2.8, id: "CVE-2023-39455", impactScore: 5.9, integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", trust: 1, userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, { attackComplexity: "Low", attackVector: "Adjacent Network", author: "OTHER", availabilityImpact: "High", baseScore: 6.8, baseSeverity: "Medium", confidentialityImpact: "High", exploitabilityScore: null, id: "JVNDB-2023-002797", impactScore: null, integrityImpact: "High", privilegesRequired: "High", scope: "Unchanged", trust: 0.8, userInteraction: "None", vectorString: "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, ], severity: [ { author: "nvd@nist.gov", id: "CVE-2023-39455", trust: 1, value: "HIGH", }, { author: "OTHER", id: "JVNDB-2023-002797", trust: 0.8, value: "Medium", }, ], }, ], sources: [ { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39455", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions. Network equipment provided by ELECOM Co., Ltd. and Logitech Co., Ltd. contains the following multiple vulnerabilities. * Unpublished features (CWE-912) - CVE-2023-32626 , CVE-2023-35991 , CVE-2023-39445 It was * Telnet Inadequate access restrictions to services (CWE-284) - CVE-2023-38132 It was * Unpublished features (CWE-912) - CVE-2023-38576 It was * buffer overflow (CWE-120) - CVE-2023-39454 It was * OS Command injection (CWE-78) - CVE-2023-39455 , CVE-2023-40072 It was * OS Command injection (CWE-78) - CVE-2023-39944 , CVE-2023-40069 This vulnerability information is JPCERT/CC Report to JPCERT/CC Coordinated with the developer. Reporter : Zero Zero One Co., Ltd. Hayakawa Soraya MrThe expected impact depends on each vulnerability, but it may be affected as follows. It was * A third party with access to the product logs into a specific operation screen and performs arbitrary operations. OS Command is executed - CVE-2023-32626 , CVE-2023-35991 It was * by a third party who has access to the product; telnet logged into the service - CVE-2023-38132 It was * A third party who can log in to the product may perform arbitrary actions from a specific operation screen. - CVE-2023-39445 It was * Arbitrary code can be executed by a third party who has access to the product - CVE-2023-39454 It was * A third party who can log in to the product sends a specially crafted request and sends an arbitrary request", sources: [ { db: "NVD", id: "CVE-2023-39455", }, { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "VULMON", id: "CVE-2023-39455", }, ], trust: 1.71, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2023-39455", trust: 2.7, }, { db: "JVN", id: "JVNVU91630351", trust: 1.9, }, { db: "JVNDB", id: "JVNDB-2023-002797", trust: 0.8, }, { db: "VULMON", id: "CVE-2023-39455", trust: 0.1, }, ], sources: [ { db: "VULMON", id: "CVE-2023-39455", }, { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39455", }, ], }, id: "VAR-202308-2595", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "VARIoT devices database", id: null, }, ], trust: 0.6666667, }, last_update_date: "2024-08-29T23:01:42.046000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "wireless LAN Request for firmware update to improve router/repeater security ELECOM CO., LTD.", trust: 0.8, url: "https://www.elecom.co.jp/news/security/", }, ], sources: [ { db: "JVNDB", id: "JVNDB-2023-002797", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-78", trust: 1, }, { problemtype: "Classic buffer overflow (CWE-120) [ others ]", trust: 0.8, }, { problemtype: " Inappropriate access control (CWE-284) [ others ]", trust: 0.8, }, { problemtype: "OS Command injection (CWE-78) [ others ]", trust: 0.8, }, { problemtype: " Unpublished features (CWE-912) [ others ]", trust: 0.8, }, ], sources: [ { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39455", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 1.1, url: "https://jvn.jp/en/vu/jvnvu91630351/", }, { trust: 1.1, url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { trust: 0.8, url: "http://jvn.jp/vu/jvnvu91630351/index.html", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-32626", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-35991", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-38132", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-38576", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-39445", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-39454", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-39455", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-39944", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-40069", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-40072", }, { trust: 0.1, url: "https://nvd.nist.gov", }, ], sources: [ { db: "VULMON", id: "CVE-2023-39455", }, { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39455", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "VULMON", id: "CVE-2023-39455", }, { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39455", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2023-08-18T00:00:00", db: "VULMON", id: "CVE-2023-39455", }, { date: "2023-08-15T00:00:00", db: "JVNDB", id: "JVNDB-2023-002797", }, { date: "2023-08-18T10:15:12.337000", db: "NVD", id: "CVE-2023-39455", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2023-08-18T00:00:00", db: "VULMON", id: "CVE-2023-39455", }, { date: "2024-08-28T08:03:00", db: "JVNDB", id: "JVNDB-2023-002797", }, { date: "2023-08-23T16:48:02.820000", db: "NVD", id: "CVE-2023-39455", }, ], }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Multiple vulnerabilities in ELECOM and Logitech network equipment", sources: [ { db: "JVNDB", id: "JVNDB-2023-002797", }, ], trust: 0.8, }, }
var-202308-2599
Vulnerability from variot
Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console. Network equipment provided by ELECOM Co., Ltd. and Logitech Co., Ltd. contains the following multiple vulnerabilities. * Unpublished features (CWE-912) - CVE-2023-32626 , CVE-2023-35991 , CVE-2023-39445 It was * Telnet Inadequate access restrictions to services (CWE-284) - CVE-2023-38132 It was * Unpublished features (CWE-912) - CVE-2023-38576 It was * buffer overflow (CWE-120) - CVE-2023-39454 It was * OS Command injection (CWE-78) - CVE-2023-39455 , CVE-2023-40072 It was * OS Command injection (CWE-78) - CVE-2023-39944 , CVE-2023-40069 This vulnerability information is JPCERT/CC Report to JPCERT/CC Coordinated with the developer. Reporter : Zero Zero One Co., Ltd. Hayakawa Soraya MrThe expected impact depends on each vulnerability, but it may be affected as follows. It was * A third party with access to the product logs into a specific operation screen and performs arbitrary operations. OS Command is executed - CVE-2023-32626 , CVE-2023-35991 It was * by a third party who has access to the product; telnet logged into the service - CVE-2023-38132 It was * A third party who can log in to the product may perform arbitrary actions from a specific operation screen. - CVE-2023-39445 It was * Arbitrary code can be executed by a third party who has access to the product - CVE-2023-39454 It was * A third party who can log in to the product sends a specially crafted request and sends an arbitrary request. OS Command is executed - CVE-2023-39455 , CVE-2023-40072 It was * A third party with access to the product may send a specially crafted request to OS Command is executed - CVE-2023-39944 , CVE-2023-40069
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-202308-2599", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "wrc-1467ghbk-s", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-733febk2-a", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-1900ghbk-s", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-1467ghbk-a", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-f1167acf2", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-1900ghbk-a", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wrc-600ghbk-a", scope: "eq", trust: 1, vendor: "elecom", version: "*", }, { model: "wab-i1750-ps", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-w451ngr", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wrc-1750ghbk", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-1750ghbk-e", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wab-s1167-ps", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-wh300n/re", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wab-m1775-ps", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wab-m2133", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-wh300andgpe", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "lan-w300n/rs", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wrc-1900ghbk-s", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-1900ghbk-a", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wab-s1775", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-w300n/dr", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "lan-wh450n/gp", scope: "eq", trust: 0.8, vendor: "ロジテック株式会社", version: "all s (cve-2023-35991)", }, { model: "wrc-1467ghbk-s", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-1467ghbk-a", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-w300n/p", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "lan-wh300n/dr", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wrc-f1167acf", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-1750ghbk2-i", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-x1800gsa-b", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-f1167acf2", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-x1800gsh-b", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-w300n/pr5", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wrc-600ghbk-a", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-733febk2-a", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-wh300n/dgp", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wab-s1167", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-1167ghbk2", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wrc-x1800gs-b", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "wab-s600-ps", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, { model: "lan-wh300an/dgp", scope: null, trust: 0.8, vendor: "ロジテック株式会社", version: null, }, { model: "wab-s300", scope: null, trust: 0.8, vendor: "エレコム株式会社", version: null, }, ], sources: [ { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39445", }, ], }, cve: "CVE-2023-39445", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { acInsufInfo: null, accessComplexity: "Low", accessVector: "Adjacent Network", authentication: "None", author: "NVD", availabilityImpact: "Partial", baseScore: 5.8, confidentialityImpact: "Partial", exploitabilityScore: null, id: "CVE-2023-39445", impactScore: null, integrityImpact: "Partial", obtainAllPrivilege: null, obtainOtherPrivilege: null, obtainUserPrivilege: null, severity: "Medium", trust: 0.8, userInteractionRequired: null, vectorString: "AV:A/AC:L/Au:N/C:P/I:P/A:P", version: "2.0", }, ], cvssV3: [ { attackComplexity: "LOW", attackVector: "ADJACENT", author: "nvd@nist.gov", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", exploitabilityScore: 2.8, id: "CVE-2023-39445", impactScore: 5.9, integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", trust: 1, userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, { attackComplexity: "Low", attackVector: "Adjacent Network", author: "OTHER", availabilityImpact: "High", baseScore: 8.8, baseSeverity: "High", confidentialityImpact: "High", exploitabilityScore: null, id: "JVNDB-2023-002797", impactScore: null, integrityImpact: "High", privilegesRequired: "None", scope: "Unchanged", trust: 0.8, userInteraction: "None", vectorString: "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, ], severity: [ { author: "nvd@nist.gov", id: "CVE-2023-39445", trust: 1, value: "HIGH", }, { author: "NVD", id: "CVE-2023-39445", trust: 0.8, value: "High", }, ], }, ], sources: [ { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39445", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console. Network equipment provided by ELECOM Co., Ltd. and Logitech Co., Ltd. contains the following multiple vulnerabilities. * Unpublished features (CWE-912) - CVE-2023-32626 , CVE-2023-35991 , CVE-2023-39445 It was * Telnet Inadequate access restrictions to services (CWE-284) - CVE-2023-38132 It was * Unpublished features (CWE-912) - CVE-2023-38576 It was * buffer overflow (CWE-120) - CVE-2023-39454 It was * OS Command injection (CWE-78) - CVE-2023-39455 , CVE-2023-40072 It was * OS Command injection (CWE-78) - CVE-2023-39944 , CVE-2023-40069 This vulnerability information is JPCERT/CC Report to JPCERT/CC Coordinated with the developer. Reporter : Zero Zero One Co., Ltd. Hayakawa Soraya MrThe expected impact depends on each vulnerability, but it may be affected as follows. It was * A third party with access to the product logs into a specific operation screen and performs arbitrary operations. OS Command is executed - CVE-2023-32626 , CVE-2023-35991 It was * by a third party who has access to the product; telnet logged into the service - CVE-2023-38132 It was * A third party who can log in to the product may perform arbitrary actions from a specific operation screen. - CVE-2023-39445 It was * Arbitrary code can be executed by a third party who has access to the product - CVE-2023-39454 It was * A third party who can log in to the product sends a specially crafted request and sends an arbitrary request. OS Command is executed - CVE-2023-39455 , CVE-2023-40072 It was * A third party with access to the product may send a specially crafted request to OS Command is executed - CVE-2023-39944 , CVE-2023-40069", sources: [ { db: "NVD", id: "CVE-2023-39445", }, { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "VULMON", id: "CVE-2023-39445", }, ], trust: 1.71, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2023-39445", trust: 2.7, }, { db: "JVN", id: "JVNVU91630351", trust: 1.9, }, { db: "JVNDB", id: "JVNDB-2023-002797", trust: 0.8, }, { db: "VULMON", id: "CVE-2023-39445", trust: 0.1, }, ], sources: [ { db: "VULMON", id: "CVE-2023-39445", }, { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39445", }, ], }, id: "VAR-202308-2599", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "VARIoT devices database", id: null, }, ], trust: 0.6666667, }, last_update_date: "2024-10-08T23:10:59.186000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "wireless LAN Request for firmware update to improve router/repeater security ELECOM CO., LTD.", trust: 0.8, url: "https://www.elecom.co.jp/news/security/", }, ], sources: [ { db: "JVNDB", id: "JVNDB-2023-002797", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "NVD-CWE-Other", trust: 1, }, { problemtype: "CWE-94", trust: 1, }, { problemtype: "Classic buffer overflow (CWE-120) [ others ]", trust: 0.8, }, { problemtype: " Inappropriate access control (CWE-284) [ others ]", trust: 0.8, }, { problemtype: "OS Command injection (CWE-78) [ others ]", trust: 0.8, }, { problemtype: " Unpublished features (CWE-912) [ others ]", trust: 0.8, }, ], sources: [ { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39445", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 1.1, url: "https://jvn.jp/en/vu/jvnvu91630351/", }, { trust: 1.1, url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { trust: 0.8, url: "http://jvn.jp/vu/jvnvu91630351/index.html", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-32626", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-35991", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-38132", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-38576", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-39445", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-39454", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-39455", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-39944", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-40069", }, { trust: 0.8, url: "https://nvd.nist.gov/vuln/detail/cve-2023-40072", }, { trust: 0.1, url: "https://nvd.nist.gov", }, ], sources: [ { db: "VULMON", id: "CVE-2023-39445", }, { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39445", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "VULMON", id: "CVE-2023-39445", }, { db: "JVNDB", id: "JVNDB-2023-002797", }, { db: "NVD", id: "CVE-2023-39445", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2023-08-18T00:00:00", db: "VULMON", id: "CVE-2023-39445", }, { date: "2023-08-15T00:00:00", db: "JVNDB", id: "JVNDB-2023-002797", }, { date: "2023-08-18T10:15:12.037000", db: "NVD", id: "CVE-2023-39445", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2023-08-18T00:00:00", db: "VULMON", id: "CVE-2023-39445", }, { date: "2024-08-28T08:03:00", db: "JVNDB", id: "JVNDB-2023-002797", }, { date: "2024-10-08T15:35:13.413000", db: "NVD", id: "CVE-2023-39445", }, ], }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Multiple vulnerabilities in ELECOM and Logitech network equipment", sources: [ { db: "JVNDB", id: "JVNDB-2023-002797", }, ], trust: 0.8, }, }
Vulnerability from fkie_nvd
Published
2023-08-18 10:15
Modified
2024-11-21 08:15
Severity ?
Summary
Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| vultures@jpcert.or.jp | https://jvn.jp/en/vu/JVNVU91630351/ | Third Party Advisory | |
| vultures@jpcert.or.jp | https://www.elecom.co.jp/news/security/20230810-01/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://jvn.jp/en/vu/JVNVU91630351/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.elecom.co.jp/news/security/20230810-01/ | Vendor Advisory |
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1467ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BC533672-D149-4A6B-A60F-E5888A4D0866", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1467ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "9EE63634-3DBE-4B5F-B871-F076238BC4C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1467ghbk-s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F19CD96A-4C04-4BFA-9E4D-8FC5E9E5E234", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1467ghbk-s:-:*:*:*:*:*:*:*", matchCriteriaId: "376A8656-1F77-4F34-B644-5DB95CEE1FD8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1900ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B6924154-8795-4E5D-8DA3-6EB49EEA2EC0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1900ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "F9EEA205-6C7C-4AB3-BAEF-30249B176DE8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1900ghbk-s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A0420E3E-E12A-471E-8EE1-67E2BC70D3CA", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1900ghbk-s:-:*:*:*:*:*:*:*", matchCriteriaId: "20D26F24-2789-4111-983D-F3CF358E5B19", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-600ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "59693326-E999-4115-BB4D-67C6B6A6FC4F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-600ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "62FEEDBD-C39E-46C4-87E7-B59967845A42", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-733febk2-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3ADFE2B7-2D1A-42A1-9BB5-BEB940464D53", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-733febk2-a:-:*:*:*:*:*:*:*", matchCriteriaId: "B2468934-2A7D-4DD7-8145-7F3E86F12BB1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-f1167acf2_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7236FA68-7625-427E-AD31-995EE0CAD0F9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-f1167acf2:-:*:*:*:*:*:*:*", matchCriteriaId: "A01DD657-E35F-434C-B9D1-6EFA4C69A0CF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.", }, { lang: "es", value: "La vulnerabilidad de funcionalidad oculta en LAN-WH300N/RE todas las versiones proporcionadas por LOGITEC CORPORATION permite a un atacante no autenticado ejecutar código arbitrario enviando un archivo especialmente diseñado a la consola de gestión determinada del producto.\n", }, ], id: "CVE-2023-39445", lastModified: "2024-11-21T08:15:26.513", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2023-08-18T10:15:12.037", references: [ { source: "vultures@jpcert.or.jp", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, { source: "vultures@jpcert.or.jp", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, ], sourceIdentifier: "vultures@jpcert.or.jp", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "NVD-CWE-Other", }, ], source: "nvd@nist.gov", type: "Primary", }, { description: [ { lang: "en", value: "CWE-94", }, ], source: "134c704f-9b21-4f2e-91b3-4a467353bcc0", type: "Secondary", }, ], }
Vulnerability from fkie_nvd
Published
2023-08-18 10:15
Modified
2024-11-21 08:15
Severity ?
Summary
OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| vultures@jpcert.or.jp | https://jvn.jp/en/vu/JVNVU91630351/ | Third Party Advisory | |
| vultures@jpcert.or.jp | https://www.elecom.co.jp/news/security/20230810-01/ | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://jvn.jp/en/vu/JVNVU91630351/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.elecom.co.jp/news/security/20230810-01/ | Vendor Advisory |
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-600ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "59693326-E999-4115-BB4D-67C6B6A6FC4F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-600ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "62FEEDBD-C39E-46C4-87E7-B59967845A42", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1467ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "BC533672-D149-4A6B-A60F-E5888A4D0866", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1467ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "9EE63634-3DBE-4B5F-B871-F076238BC4C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1900ghbk-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "B6924154-8795-4E5D-8DA3-6EB49EEA2EC0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1900ghbk-a:-:*:*:*:*:*:*:*", matchCriteriaId: "F9EEA205-6C7C-4AB3-BAEF-30249B176DE8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-733febk2-a_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "3ADFE2B7-2D1A-42A1-9BB5-BEB940464D53", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-733febk2-a:-:*:*:*:*:*:*:*", matchCriteriaId: "B2468934-2A7D-4DD7-8145-7F3E86F12BB1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-f1167acf2_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "7236FA68-7625-427E-AD31-995EE0CAD0F9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-f1167acf2:-:*:*:*:*:*:*:*", matchCriteriaId: "A01DD657-E35F-434C-B9D1-6EFA4C69A0CF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1467ghbk-s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "F19CD96A-4C04-4BFA-9E4D-8FC5E9E5E234", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1467ghbk-s:-:*:*:*:*:*:*:*", matchCriteriaId: "376A8656-1F77-4F34-B644-5DB95CEE1FD8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:elecom:wrc-1900ghbk-s_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "A0420E3E-E12A-471E-8EE1-67E2BC70D3CA", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:elecom:wrc-1900ghbk-s:-:*:*:*:*:*:*:*", matchCriteriaId: "20D26F24-2789-4111-983D-F3CF358E5B19", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.", }, { lang: "es", value: "La vulnerabilidad de inyección de comandos del sistema operativo en los routers LAN inalámbricos ELECOM permite a un usuario autenticado ejecutar un comando arbitrario del sistema operativo enviando una solicitud especialmente diseñada. Los productos y versiones afectados son los siguientes WRC-600GHBK-A todas las versiones, WRC-1467GHBK-A todas las versiones, WRC-1900GHBK-A todas las versiones, WRC-733FEBK2-A todas las versiones, WRC-F1167ACF2 todas las versiones, WRC-1467GHBK-S todas las versiones y WRC-1900GHBK-S todas las versiones.\n", }, ], id: "CVE-2023-39455", lastModified: "2024-11-21T08:15:27.430", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2023-08-18T10:15:12.337", references: [ { source: "vultures@jpcert.or.jp", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, { source: "vultures@jpcert.or.jp", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, ], sourceIdentifier: "vultures@jpcert.or.jp", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-78", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
cve-2023-39445
Vulnerability from cvelistv5
Published
2023-08-18 09:40
Modified
2024-10-08 15:11
Severity ?
EPSS score ?
Summary
Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| LOGITEC CORPORATION | LAN-WH300N/RE |
Version: all versions |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T18:10:20.697Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { tags: [ "x_transferred", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:h:logitec:lan-wh300n_re:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "lan-wh300n_re", vendor: "logitec", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-39445", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-10-08T14:47:13.849174Z", version: "2.0.3", }, type: "ssvc", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-94", description: "CWE-94 Improper Control of Generation of Code ('Code Injection')", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-08T15:11:13.950Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "LAN-WH300N/RE", vendor: "LOGITEC CORPORATION", versions: [ { status: "affected", version: "all versions", }, ], }, ], descriptions: [ { lang: "en", value: "Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.", }, ], problemTypes: [ { descriptions: [ { description: "Hidden Functionality", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-18T09:40:17.145Z", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { url: "https://jvn.jp/en/vu/JVNVU91630351/", }, ], }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2023-39445", datePublished: "2023-08-18T09:40:17.145Z", dateReserved: "2023-08-09T11:54:56.682Z", dateUpdated: "2024-10-08T15:11:13.950Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-39455
Vulnerability from cvelistv5
Published
2023-08-18 09:42
Modified
2024-08-02 18:10
Severity ?
EPSS score ?
Summary
OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.
References
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | ELECOM CO.,LTD. | WRC-600GHBK-A |
Version: all versions |
|||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T18:10:20.649Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { tags: [ "x_transferred", ], url: "https://jvn.jp/en/vu/JVNVU91630351/", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "WRC-600GHBK-A", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1467GHBK-A", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1900GHBK-A", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-733FEBK2-A", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-F1167ACF2", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1467GHBK-S", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, { product: "WRC-1900GHBK-S", vendor: "ELECOM CO.,LTD.", versions: [ { status: "affected", version: "all versions", }, ], }, ], descriptions: [ { lang: "en", value: "OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.", }, ], problemTypes: [ { descriptions: [ { description: "OS command injection", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-08-18T09:42:19.491Z", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { url: "https://www.elecom.co.jp/news/security/20230810-01/", }, { url: "https://jvn.jp/en/vu/JVNVU91630351/", }, ], }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2023-39455", datePublished: "2023-08-18T09:42:19.491Z", dateReserved: "2023-08-09T11:55:00.303Z", dateUpdated: "2024-08-02T18:10:20.649Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }