Description
ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of the product, and a victim administrator may be tricked to use a crafted configuration file.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ELECOM CO.,LTD. WRC-X1800GS-B
v1.19 and earlieraffected
ELECOM CO.,LTD. WRC-X3000GS2-B
v1.09 and earlieraffected
ELECOM CO.,LTD. WRC-X3000GS2-W
v1.09 and earlieraffected
ELECOM CO.,LTD. WRC-X3000GS2A-B
v1.09 and earlieraffected
ELECOM CO.,LTD. WRC-X3000GST2-B
v1.06 and earlieraffected
ELECOM CO.,LTD. WRC-X1800GSA-B
v1.19 and earlieraffected
ELECOM CO.,LTD. WRC-X1800GSH-B
v1.19 and earlieraffected
ELECOM CO.,LTD. WRC-X6000QS-G
v1.14 and earlieraffected
ELECOM CO.,LTD. WRC-X6000QSA-G
v1.14 and earlieraffected
ELECOM CO.,LTD. WRC-X6000XS-G
v1.12 and earlieraffected
ELECOM CO.,LTD. WRC-X6000XST-G
v1.16 and earlieraffected
ELECOM CO.,LTD. WRC-XE5400GS-G
1.13 and earlieraffected
ELECOM CO.,LTD. WRC-XE5400GSA-G
v1.13 and earlieraffected