| Assigner | jpcert |
| Reserved | 2024-02-15 |
| Published | 2024-02-28 |
| Updated | 2024-06-12 |
Description
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B".
Problem types
OS command injection
Product status
References
https://www.elecom.co.jp/news/security/20240220-01/
https://jvn.jp/en/vu/JVNVU99444194/
