Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-22372

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a

Description

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ELECOM CO.,LTD. WRC-X1500GS-B

  • v1.11 and earlieraffected

ELECOM CO.,LTD. WRC-X1500GSA-B

  • v1.11 and earlieraffected

ELECOM CO.,LTD. WRC-X1800GS-B

  • v1.17 and earlieraffected

ELECOM CO.,LTD. WRC-X1800GSA-B

  • v1.17 and earlieraffected

ELECOM CO.,LTD. WRC-X1800GSH-B

  • v1.17 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GS2-B

  • v1.08 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GS2-W

  • v1.08 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GS2A-B

  • v1.08 and earlieraffected

ELECOM CO.,LTD. WRC-XE5400GS-G

  • v1.12 and earlieraffected

ELECOM CO.,LTD. WRC-XE5400GSA-G

  • v1.12 and earlieraffected

ELECOM CO.,LTD. WRC-X6000QS-G

  • v1.13 and earlieraffected

ELECOM CO.,LTD. WRC-X6000QSA-G

  • v1.13 and earlieraffected

ELECOM CO.,LTD. WRC-X6000XS-G

  • v1.09affected

ELECOM CO.,LTD. WRC-X6000XST-G

  • v1.12 and earlieraffected

ELECOM CO.,LTD. WRC-X3000GST2-B

  • v1.06 and earlieraffected

References