Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-40072

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted reques

Description

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ELECOM CO.,LTD. WAB-S600-PS

  • all versionsaffected

ELECOM CO.,LTD. WAB-S300

  • all versionsaffected

ELECOM CO.,LTD. WAB-S1775

  • v1.1.9 and earlieraffected

ELECOM CO.,LTD. WAB-M1775-PS

  • v1.1.21 and earlieraffected

ELECOM CO.,LTD. WAB-S1167

  • v1.0.7 and earlieraffected

ELECOM CO.,LTD. WAB-M2133

  • v1.3.22 and earlieraffected

ELECOM CO.,LTD. WAB-I1750-PS

  • v1.5.10 and earlieraffected

ELECOM CO.,LTD. WAB-S1167-PS

  • v1.5.6 and earlieraffected

References