Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-37561

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and c

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12 and earlier, WTC-300HWH v1.09 and earlier, WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ELECOM CO.,LTD. WRH-300WH-H

  • v2.12 and earlieraffected

ELECOM CO.,LTD. WTC-300HWH

  • v1.09 and earlieraffected

ELECOM CO.,LTD. WTC-C1167GC-B

  • v1.17 and earlieraffected

ELECOM CO.,LTD. WTC-C1167GC-W

  • v1.17 and earlieraffected

References