OS Command Injection Vulnerability in ELECOM Wireless LAN Routers
CVE-2023-37564

8HIGH

Key Information:

Vendor

Elecom Co.,ltd.

Status
Wrc-1167ghbk-s
Wrc-1167gebk-s
Wrc-1167febk-s
Wrc-1167ghbk3-a
Vendor
CVE Published:
13 July 2023

What is CVE-2023-37564?

An OS command injection vulnerability exists in ELECOM wireless LAN routers, which permits an authenticated attacker within the network to execute arbitrary operating system commands with root privileges. This is accomplished by sending a specially crafted request to the devices, potentially leading to unauthorized control and manipulation of the router's functionalities. Affected models include WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, and WRC-1167FEBK-A v1.18 and earlier.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

WRC-1167FEBK-A v1.18 and earlier

WRC-1167FEBK-S v1.04 and earlier

WRC-1167GEBK-S v1.03 and earlier

References

https://www.elecom.co.jp/news/security/20230711-01/
https://jvn.jp/en/jp/JVN05223215/

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.