medium6.5
CVE-2023-43757
Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD.
Impact
Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elecom | Wrc-2533ghbk2-T Firmware | All versions |
| Elecom | Wrc-2533ghbk-I Firmware | All versions |
| Elecom | Wrc-1750ghbk2-I Firmware | All versions |
| Elecom | Wrc-1750ghbk-E Firmware | All versions |
| Elecom | Wrc-1750ghbk Firmware | All versions |
| Elecom | Wrc-1167ghbk2 Firmware | All versions |
| Elecom | Wrc-1167ghbk Firmware | All versions |
| Elecom | Wrc-F1167acf Firmware | All versions |
| Elecom | Wrc-733ghbk Firmware | All versions |
| Elecom | Wrc-733ghbk-I Firmware | All versions |
| Elecom | Wrc-733ghbk-C Firmware | All versions |
| Elecom | Wrc-300ghbk2-I Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/vu/JVNVU94119876/
- https://www.elecom.co.jp/news/security/20210706-01/
- https://www.elecom.co.jp/news/security/20230810-01/
- https://www.elecom.co.jp/news/security/20231114-01/
- https://jvn.jp/en/vu/JVNVU94119876/
- https://www.elecom.co.jp/news/security/20210706-01/
- https://www.elecom.co.jp/news/security/20230810-01/
- https://www.elecom.co.jp/news/security/20231114-01/