Command Injection in ELECOM Wireless LAN Routers

CVE-2023-37568

What is CVE-2023-37568?

ELECOM wireless LAN routers, specifically the WRC-1167GHBK-S and WRC-1167GEBK-S models, have a critical command injection vulnerability that allows unauthorized network-adjacent attackers to execute arbitrary commands. This vulnerability arises when attackers send specially crafted requests to the web management interface, potentially compromising the security of the device and the network it is connected to. Users of affected versions are urged to review their device configuration and consider implementing security measures to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References