PT-2023-26026 · Elecom · Wrc-1167Gebk-S

Chuya Hayakawa · Published 2023-07-13 · Updated 2023-07-25 · CVE-2023-37568

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ELECOM wireless LAN routers WRC-1167GHBK-S versions 1.03 and earlier ELECOM wireless LAN routers WRC-1167GEBK-S versions 1.03 and earlier

Description The issue allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page.

Recommendations For ELECOM wireless LAN routers WRC-1167GHBK-S versions 1.03 and earlier, consider restricting access to the web management page until a patch is available. For ELECOM wireless LAN routers WRC-1167GEBK-S versions 1.03 and earlier, consider restricting access to the web management page until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-37568

Affected Products

Wrc-1167Gebk-S

References · 6

• https://elecom.co.jp/news/security/20230711-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-37568 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37568 · Security Note
• https://t.me/cvenotify/54221 · Telegram Post
• https://t.me/cvenotify/54201 · Telegram Post
• https://jvn.jp/en/vu/JVNVU91850798 · Note