Assigner | jpcert |
Reserved | 2024-03-19 |
Published | 2024-04-04 |
Updated | 2024-06-20 |
Description
OS command injection vulnerability in WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1.24 and earlier allows a network-adjacent attacker with credentials to execute arbitrary OS commands by sending a specially crafted request to the product.
Problem types
OS command injection
Product status
References
https://www.elecom.co.jp/news/security/20240326-01/
https://jvn.jp/en/vu/JVNVU95381465/