CVE-2023-40069
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
There is an OS command injection vulnerability in ELECOM wireless LAN routers that allows an attacker to execute arbitrary OS commands by sending a specially crafted request. This affects all versions of models WRC-F1167ACF, WRC-1750GHBK, WRC-1167GHBK2, WRC-1750GHBK2-I, and WRC-1750GHBK-E.
Risk Assessment
This vulnerability could lead to the compromise of the router, posing a significant security threat to the organization's network.
Recommendation
It is recommended to update the router firmware to the latest version and restrict access to the devices to trusted users only.
Original NVD description (English source)
OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions.