PT-2024-19371 · Elecom · Elecom Wireless Lan Routers

Chuya Hayakawa · CVE-2024-22372 · Published 2024-01-23 · Updated 2025-02-17

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ELECOM wireless LAN routers (affected versions not specified)

Description The issue allows a network-adjacent attacker with administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. This can be done by exploiting an OS command injection vulnerability in ELECOM wireless LAN routers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-22372

Affected Products

Elecom Wireless Lan Routers

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-22372 · Security Note
• https://elecom.co.jp/news/security/20240123-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-22372 · Vendor Advisory
• https://t.me/cvenotify/111553 · Telegram Post
• https://jvn.jp/en/vu/JVNVU90908488 · Note
• https://twitter.com/VulmonFeeds/status/1750042770578792477 · Twitter Post
• https://t.me/cvenotify/88142 · Telegram Post