Description (CNA)
Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers. A specially crafted file may be uploaded to the affected product by a logged-in user with an administrative privilege, resulting in an arbitrary OS command execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ELECOM CO.,LTD. / WRC-1167GST2 | affected v1.32 and earlier |
| ELECOM CO.,LTD. / WRC-2533GS2V-B | affected v1.68 and earlier |
| ELECOM CO.,LTD. / WRC-2533GS2-B | affected v1.68 and earlier |
| ELECOM CO.,LTD. / WRC-2533GS2-W | affected v1.68 and earlier |
| ELECOM CO.,LTD. / WRC-2533GST2 | affected v1.30 and earlier |
| ELECOM CO.,LTD. / WRC-1167GS2-B | affected v1.74 and earlier |
| ELECOM CO.,LTD. / WRC-1167GS2H-B | affected v1.74 and earlier |
| ELECOM CO.,LTD. / WRC-X3200GST3-B | affected v1.27 and earlier |
| ELECOM CO.,LTD. / WRC-G01-W | affected v1.26 and earlier |
| ELECOM CO.,LTD. / WMC-2LX-B | affected v1.42 and earlier |
| ELECOM CO.,LTD. / WMC-X1800GST-B | affected v1.42 and earlier |
CWE
CWE-434
References
ADP enrichment
No English description supplied.
No references supplied.