OS Command Injection in WRC-X3000GSN, WRC-X3000GS, and WRC-X3000GSA Routers

CVE-2023-49695

What is CVE-2023-49695?

An OS command injection vulnerability exists in certain Elecom routers, specifically the WRC-X3000GSN, WRC-X3000GS, and WRC-X3000GSA. A network-adjacent attacker with administrative privileges can exploit this vulnerability by sending specially crafted requests, allowing the execution of arbitrary OS commands. This presents significant risks, as it may lead to unauthorized access or manipulation of the device.

References