| Assigner | jpcert |
| Reserved | 2024-03-19 |
| Published | 2024-04-04 |
| Updated | 2024-06-12 |
Description
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X3200GST3-B v1.25 and earlier, WRC-G01-W v1.24 and earlier, and WMC-X1800GST-B v1.41 and earlier. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B".
Problem types
OS command injection
Product status
References
https://www.elecom.co.jp/news/security/20240326-01/
https://jvn.jp/en/vu/JVNVU95381465/
