PT-2023-26021 · Elecom · Elecom Wrc-1167Febk-A+11

Chuya Hayakawa + 1 · Published 2023-07-13 · Updated 2024-11-06 · CVE-2023-37563

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ELECOM wireless LAN routers versions v1.03 and earlier ELECOM WRC-1167GHBK-S versions v1.03 and earlier ELECOM WRC-1167GEBK-S versions v1.03 and earlier ELECOM WRC-1167FEBK-S versions v1.04 and earlier ELECOM WRC-1167GHBK3-A versions v1.24 and earlier ELECOM WRC-1167FEBK-A versions v1.18 and earlier ELECOM WRC-F1167ACF2 all versions ELECOM WRC-600GHBK-A all versions ELECOM WRC-733FEBK2-A all versions ELECOM WRC-1467GHBK-A all versions ELECOM WRC-1467GHBK-S all versions ELECOM WRC-1900GHBK-A all versions ELECOM WRC-1900GHBK-S all versions

Description The issue allows a network-adjacent unauthorized attacker to obtain sensitive information.

Recommendations For ELECOM WRC-1167GHBK-S version v1.03 and earlier, update to a version later than v1.03. For ELECOM WRC-1167GEBK-S version v1.03 and earlier, update to a version later than v1.03. For ELECOM WRC-1167FEBK-S version v1.04 and earlier, update to a version later than v1.04. For ELECOM WRC-1167GHBK3-A version v1.24 and earlier, update to a version later than v1.24. For ELECOM WRC-1167FEBK-A version v1.18 and earlier, update to a version later than v1.18. For ELECOM WRC-F1167ACF2, WRC-600GHBK-A, WRC-733FEBK2-A, WRC-1467GHBK-A, WRC-1467GHBK-S, WRC-1900GHBK-A, and WRC-1900GHBK-S, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2023-37563

Affected Products

Elecom Wrc-1167Febk-A

Elecom Wrc-1167Febk-S

Elecom Wrc-1167Gebk-S

Elecom Wrc-1167Ghbk3-A

Elecom Wrc-1467Ghbk-A

Elecom Wrc-1467Ghbk-S

Elecom Wrc-1900Ghbk-A

Elecom Wrc-1900Ghbk-S

Elecom Wrc-600Ghbk-A

Elecom Wrc-733Febk2-A

Elecom Wrc-F1167Acf2

Elecom Wireless Lan Routers

References · 8

• https://elecom.co.jp/news/security/20230711-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-37563 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37563 · Security Note
• https://t.me/cibsecurity/66616 · Telegram Post
• https://jvn.jp/en/jp/JVN05223215 · Note
• https://t.me/cvenotify/56833 · Telegram Post
• https://elecom.co.jp/news/security/20230810-01 · Note
• https://t.me/cvenotify/54208 · Telegram Post