CVE-2023-40069

published 2023-08-18

CVE-2023-40069: OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a…

Priority P2 68 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
elecom_co_ltd	wrc-1167ghbk2	—	—
elecom_co_ltd	wrc-1750ghbk	—	—
elecom_co_ltd	wrc-1750ghbk-e	—	—
elecom_co_ltd	wrc-1750ghbk2-i	—	—
elecom_co_ltd	wrc-f1167acf	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78