cbcvebase.
CVE-2023-37563
published 2023-07-13

CVE-2023-37563: ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive…

PriorityP429medium6.5CVSS 3.1
AVAACLPRNUINSUCHINAN
EPSS
0.29%
20.8th percentile
ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1467GHBK-S all versions, WRC-1900GHBK-A all versions, and WRC-1900GHBK-S all versions.

Affected

17 ranges
VendorProductVersion rangeFixed in
elecomwrc-1167febk-a_firmware<= 1.18—
elecomwrc-1167febk-s_firmware<= 1.04—
elecomwrc-1167gebk-s_firmware<= 1.03—
elecomwrc-1167ghbk-s_firmware<= 1.03—
elecomwrc-1167ghbk3-a_firmware<= 1.24—
elecom_co_ltdwrc-1167febk-a——
elecom_co_ltdwrc-1167febk-s——
elecom_co_ltdwrc-1167gebk-s——
elecom_co_ltdwrc-1167ghbk-s——
elecom_co_ltdwrc-1167ghbk3-a——
elecom_co_ltdwrc-1467ghbk-a——
elecom_co_ltdwrc-1467ghbk-s——
elecom_co_ltdwrc-1900ghbk-a——
elecom_co_ltdwrc-1900ghbk-s——
elecom_co_ltdwrc-600ghbk-a——
elecom_co_ltdwrc-733febk2-a——
elecom_co_ltdwrc-f1167acf2——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.