CVSS: 8.8EPSS: 0%CPEs: 9EXPL: 0CVE-2024-23910
https://notcve.org/view.php?id=CVE-2024-23910
28 Feb 2024 — Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B are also included in e-Mesh Starter Kit "WMC-2LX-B". La vulnerabilidad de Cross-Site Request Forgery (CSRF) en los enrutadores LAN inalámbricos ELECOM permite a un atacante remoto no autenticado secuestrar la auten... • https://jvn.jp/en/jp/JVN44166658 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 7.2EPSS: 0%CPEs: 10EXPL: 0CVE-2024-22372
https://notcve.org/view.php?id=CVE-2024-22372
24 Jan 2024 — OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X1800GS-B v1.17 and earlier, WRC-X1800GSA-B v1.17 and earlier, WRC-X1800GSH-B v1.17 and earlier, WRC-X6000XS-G v1.09, and WRC-X6000XST-G v1.12 and earlier. La vulnerabilidad de inyección de comandos del sistema operativo en los routers LAN... • https://jvn.jp/en/vu/JVNVU90908488 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0CVE-2023-39454
https://notcve.org/view.php?id=CVE-2023-39454
18 Aug 2023 — Buffer overflow vulnerability in WRC-X1800GS-B v1.13 and earlier, WRC-X1800GSA-B v1.13 and earlier, and WRC-X1800GSH-B v1.13 and earlier allows an unauthenticated attacker to execute arbitrary code. La vulnerabilidad de desbordamiento del búfer en WRC-X1800GS-B v1.13 y anteriores, WRC-X1800GSA-B v1.13 y anteriores, y WRC-X1800GSH-B v1.13 y anteriores permite a un atacante no autenticado ejecutar código arbitrario. • https://jvn.jp/en/vu/JVNVU91630351 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •