Description (CNA)
OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ELECOM CO.,LTD. / WAB-S600-PS | affected all versions |
| ELECOM CO.,LTD. / WAB-S300 | affected all versions |
| ELECOM CO.,LTD. / WAB-S1775 | affected v1.1.9 and earlier |
| ELECOM CO.,LTD. / WAB-M1775-PS | affected v1.1.21 and earlier |
| ELECOM CO.,LTD. / WAB-S1167 | affected v1.0.7 and earlier |
| ELECOM CO.,LTD. / WAB-M2133 | affected v1.3.22 and earlier |
| ELECOM CO.,LTD. / WAB-I1750-PS | affected v1.5.10 and earlier |
| ELECOM CO.,LTD. / WAB-S1167-PS | affected v1.5.6 and earlier |
CWE
No CWE identifiers supplied.
References
- https://www.elecom.co.jp/news/security/20231114-01/
- https://www.elecom.co.jp/news/security/20230810-01/
- https://jvn.jp/en/vu/JVNVU91630351/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.