CVE-2023-32626 - Vulnerability Details - OpenCVE

Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00536.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Elecom	Lan-w300n\/pr5 Lan-w300n\/pr5 Firmware Lan-w300n\/rs Lan-w300n\/rs Firmware
Logitec	Lan-w300n\/rs Lan W300n Pr5

Configuration 1 [-]

AND

cpe:2.3:o:elecom:lan-w300n\/rs_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:elecom:lan-w300n\/rs:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:elecom:lan-w300n\/pr5_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:elecom:lan-w300n\/pr5:-:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2023-36869	Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://jvn.jp/en/vu/JVNVU91630351/
https://www.elecom.co.jp/news/security/20230810-01/

History

Tue, 08 Oct 2024 15:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Logitec Logitec lan-w300n\/rs Logitec lan W300n Pr5
Weaknesses		CWE-94
CPEs		cpe:2.3:h:logitec:lan-w300n\/rs:-:::::::* cpe:2.3:h:logitec:lan_w300n_pr5::::::::
Vendors & Products		Logitec Logitec lan-w300n\/rs Logitec lan W300n Pr5
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2023-08-18T09:36:26.714Z

Updated: 2024-10-08T15:05:09.195Z

Reserved: 2023-08-09T11:54:54.055Z

Link: CVE-2023-32626

Vulnrichment

Updated: 2024-08-02T15:25:36.344Z

NVD

Status : Modified

Published: 2023-08-18T10:15:09.617

Modified: 2024-11-21T08:03:43.787

Link: CVE-2023-32626

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-32626", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2023-08-09T11:54:54.055Z", "datePublished": "2023-08-18T09:36:26.714Z", "dateUpdated": "2024-10-08T15:05:09.195Z"}, "containers": {"cna": {"affected": [{"vendor": "LOGITEC CORPORATION", "product": "LAN-W300N/RS", "versions": [{"version": "all versions", "status": "affected"}]}, {"vendor": "LOGITEC CORPORATION", "product": "LAN-W300N/PR5", "versions": [{"version": "all versions", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands."}], "problemTypes": [{"descriptions": [{"description": "Hidden Functionality", "lang": "en", "type": "text"}]}], "references": [{"url": "https://www.elecom.co.jp/news/security/20230810-01/"}, {"url": "https://jvn.jp/en/vu/JVNVU91630351/"}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2023-08-18T09:36:26.714Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:25:36.344Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.elecom.co.jp/news/security/20230810-01/", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU91630351/", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-94", "lang": "en", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "affected": [{"vendor": "logitec", "product": "lan-w300n\\/rs", "cpes": ["cpe:2.3:h:logitec:lan-w300n\\/rs:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "logitec", "product": "lan_w300n_pr5", "cpes": ["cpe:2.3:h:logitec:lan_w300n_pr5:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-08T15:01:06.385485Z", "id": "CVE-2023-32626", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-08T15:05:09.195Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.elecom.co.jp/news/security/20230810-01/", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU91630351/", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:25:36.344Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-32626", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-08T15:01:06.385485Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:logitec:lan-w300n\\/rs:-:*:*:*:*:*:*:*"], "vendor": "logitec", "product": "lan-w300n\\/rs", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:logitec:lan_w300n_pr5:*:*:*:*:*:*:*:*"], "vendor": "logitec", "product": "lan_w300n_pr5", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-08T15:05:03.970Z"}}], "cna": {"affected": [{"vendor": "LOGITEC CORPORATION", "product": "LAN-W300N/RS", "versions": [{"status": "affected", "version": "all versions"}]}, {"vendor": "LOGITEC CORPORATION", "product": "LAN-W300N/PR5", "versions": [{"status": "affected", "version": "all versions"}]}], "references": [{"url": "https://www.elecom.co.jp/news/security/20230810-01/"}, {"url": "https://jvn.jp/en/vu/JVNVU91630351/"}], "descriptions": [{"lang": "en", "value": "Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "Hidden Functionality"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2023-08-18T09:36:26.714Z"}}}, "cveMetadata": {"cveId": "CVE-2023-32626", "state": "PUBLISHED", "dateUpdated": "2024-10-08T15:05:09.195Z", "dateReserved": "2023-08-09T11:54:54.055Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2023-08-18T09:36:26.714Z", "assignerShortName": "jpcert"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:elecom:lan-w300n\\/rs_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "16CDE23E-1661-4D85-813F-5D41930FC2F0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:elecom:lan-w300n\\/rs:-:*:*:*:*:*:*:*", "matchCriteriaId": "0032270C-53E3-4A46-95A8-FDE5DEFDC75C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:elecom:lan-w300n\\/pr5_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "13CD45FC-53E8-42EF-AADF-529F306E8114", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:elecom:lan-w300n\\/pr5:-:*:*:*:*:*:*:*", "matchCriteriaId": "4CC25404-D088-4140-A90A-F7CFA0C0A8BC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands."}, {"lang": "es", "value": "La vulnerabilidad de funcionalidad oculta en LAN-W300N/RS todas las versiones, y LAN-W300N/PR5 todas las versiones permite a un atacante no autenticado iniciar sesi\u00f3n en la consola de gesti\u00f3n determinada del producto y ejecutar comandos arbitrarios del sistema operativo.\n"}], "id": "CVE-2023-32626", "lastModified": "2024-11-21T08:03:43.787", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-18T10:15:09.617", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU91630351/"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://www.elecom.co.jp/news/security/20230810-01/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU91630351/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.elecom.co.jp/news/security/20230810-01/"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-94"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}