CVE-2023-37567 - CVE House

Back to Database

Status published Unknown CVE-2023-37567

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers...

0 CVSS

Vulnerability Description

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port of the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, and LAN-W301NR all versions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-37567

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from ELECOM CO.,LTD.

View All →

Clone for Windows provided by ELECOM CO.,LTD. registers a Windows...

WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements...

WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements...

Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B. If exploited,...

WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements...

Affected Vendor

ELECOM CO.,LTD.

View all reports →

Affected Software

WRC-1167GHBK3-A, WRC-F1167ACF2, WRC-600GHBK-A, WRC-733FEBK2-A, WRC-1467GHBK-A, WRC-1900GHBK-A, LAN-W301NR

Vulnerable Versions:

v1.24 and earlier , all versions , all versions

Timeline

Official Publish: July 13th, 2023

Last Modified: November 6th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.