Unrated severityNVD Advisory· Published Jul 13, 2023· Updated Nov 6, 2024

CVE-2023-37564

Description

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OS command with a root privilege by sending a specially crafted request. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, and WRC-1167FEBK-A v1.18 and earlier.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ELECOM CO.,LTD./WRC-1167FEBK-Allm-fuzzy
Range: <=1.04
ELECOM CO.,LTD./Wrc 1167ghbk Sllm-fuzzy2 versions
<=1.03+ 1 more
- (no CPE)range: <=1.03
- (no CPE)range: v1.03 and earlier

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN05223215/mitre
www.elecom.co.jp/news/security/20230711-01/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000