Command Injection Vulnerability in ELECOM and LOGITEC Wireless LAN Routers

CVE-2023-37566

Summary

A command injection vulnerability exists in ELECOM and LOGITEC wireless LAN routers, permitting network-adjacent authenticated attackers to execute arbitrary commands. This poses significant security risks, as attackers can manipulate the router’s functions through specially crafted requests sent to the web management page. Users should review their current router versions and apply necessary updates to mitigate potential exploits. The affected products span multiple router models, emphasizing the need for prompt action to enhance security.

References