medium6.8
CVE-2024-22372
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS c…
Impact
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elecom | Wrc-X1800gs-B Firmware | before 1.18 |
| Elecom | Wrc-X1800gsh-B Firmware | before 1.18 |
| Elecom | Wrc-X1800gsa-B Firmware | before 1.18 |
| Elecom | Wrc-X6000xs-G Firmware | Version 1.09 |
| Elecom | Wrc-X6000xst-G Firmware | before 1.14 |