OS Command Injection in ELECOM Wireless LAN Routers

CVE-2023-39455

What is CVE-2023-39455?

An OS command injection vulnerability exists in ELECOM wireless LAN routers that allows authenticated users to execute arbitrary operating system commands. By crafting specific requests, users can exploit this flaw, potentially compromising device integrity and leading to unintended consequences. Affected models include various versions of WRC-600GHBK-A, WRC-1467GHBK-A, WRC-1900GHBK-A, WRC-733FEBK2-A, WRC-F1167ACF2, WRC-1467GHBK-S, and WRC-1900GHBK-S, which collectively represent a significant risk to network security.

References