Assigner | jpcert |
Reserved | 2024-03-19 |
Published | 2024-04-04 |
Updated | 2024-06-04 |
Description
WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1.24 and earlier allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted request.
Problem types
Information disclosure
Product status
References
https://www.elecom.co.jp/news/security/20240326-01/
https://jvn.jp/en/vu/JVNVU95381465/