NetSight
critical9.8

CVE-2023-40069

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a…

Impact

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions.

Affected products

VendorProductAffected versions
ElecomWrc-F1167acf Firmware
All versions
ElecomWrc-1750ghbk Firmware
All versions
ElecomWrc-1167ghbk2 Firmware
All versions
ElecomWrc-1750ghbk2-I Firmware
All versions
ElecomWrc-1750ghbk-E Firmware
All versions

Weakness classification

References