CVE-2020-5634
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10) allow an attacker on the same network segment to execute arbitrary OS commands with a root privilege via unspecified vectors.
Los enrutadores LAN ELECOM (versiones de firmware WRC-2533GST2 anteriores a v1.14, versiones de firmware WRC-1900GST2 anteriores a v1.14, versiones de firmware WRC-1750GST2 anteriores a v1.14 y versiones de firmware WRC-1167GST2 anteriores a v1.10), permite a un atacante en el mismo segmento de red ejecutar comandos arbitrarios de Sistema Operativo con un privilegio root por medio de vectores no especificados
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-01-06 CVE Reserved
- 2020-10-06 CVE Published
- 2023-06-22 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://jvn.jp/en/jp/JVN82892096/index.html | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.elecom.co.jp/news/security/20201005-01 | 2020-10-13 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Elecom Search vendor "Elecom" | Wrc-2533gst2 Firmware Search vendor "Elecom" for product "Wrc-2533gst2 Firmware" | < 1.14 Search vendor "Elecom" for product "Wrc-2533gst2 Firmware" and version " < 1.14" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-2533gst2 Search vendor "Elecom" for product "Wrc-2533gst2" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1900gst2 Firmware Search vendor "Elecom" for product "Wrc-1900gst2 Firmware" | < 1.14 Search vendor "Elecom" for product "Wrc-1900gst2 Firmware" and version " < 1.14" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1900gst2 Search vendor "Elecom" for product "Wrc-1900gst2" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1750gst2 Firmware Search vendor "Elecom" for product "Wrc-1750gst2 Firmware" | < 1.14 Search vendor "Elecom" for product "Wrc-1750gst2 Firmware" and version " < 1.14" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1750gst2 Search vendor "Elecom" for product "Wrc-1750gst2" | - | - |
Safe
|
| Elecom Search vendor "Elecom" | Wrc-1167gst2 Firmware Search vendor "Elecom" for product "Wrc-1167gst2 Firmware" | < 1.10 Search vendor "Elecom" for product "Wrc-1167gst2 Firmware" and version " < 1.10" | - |
Affected
| in | Elecom Search vendor "Elecom" | Wrc-1167gst2 Search vendor "Elecom" for product "Wrc-1167gst2" | - | - |
Safe
|