CVE Catalog

CVE-2023-37563

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

21th percentile - higher than 21% of all known CVEs

Summary

ELECOM wireless LAN routers are vulnerable to sensitive information exposure, allowing a network-adjacent unauthorized attacker to obtain sensitive information.

Risk Assessment

The exposure of sensitive information may lead to privacy breaches for users and potential attacks on the organization's network infrastructure.

Recommendation

It is recommended to update the router firmware to the latest versions to minimize the risk of sensitive data exposure.

Original NVD description (English source)

ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1467GHBK-S all versions, WRC-1900GHBK-A all versions, and WRC-1900GHBK-S all versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS