CVE-2023-37561
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
An open redirect vulnerability in ELECOM wireless LAN routers and repeaters allows a remote unauthenticated attacker to redirect users to arbitrary websites. The attacker can use a specially crafted URL to conduct phishing attacks.
Risk Assessment
This vulnerability poses a risk of phishing attacks, which could lead to user data theft and loss of trust in the organization.
Recommendation
It is recommended to update the firmware of ELECOM routers and repeaters to the latest versions to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12 and earlier, WTC-300HWH v1.09 and earlier, WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier.