OS Command Injection Vulnerability in Elecom WRC-X3000GS2 Products

CVE-2023-43752

What is CVE-2023-43752?

An OS command injection vulnerability exists in the Elecom WRC-X3000GS2 series, specifically affecting WRC-X3000GS2-W, WRC-X3000GS2-B, and WRC-X3000GS2A-B versions prior to v1.05. This flaw enables a network-adjacent authenticated user to execute arbitrary operating system commands through the submission of specially crafted requests, presenting a significant security risk to affected devices. It is essential for users of these products to implement the necessary updates to mitigate this vulnerability.

References