Description
OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary OS command.
Published: 2024-08-01
Score: 6.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-38328 OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary OS command.
History

Tue, 26 Nov 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_0

{'score': 6.8, 'vector': 'CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Elecom Wrc-x1500gs-b Firmware Wrc-x1500gsa-b Firmware Wrc-x6000xs-g Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published:

Updated: 2025-02-17T05:37:48.242Z

Reserved: 2024-07-26T08:52:15.655Z

Link: CVE-2024-39607

cve-icon Vulnrichment

Updated: 2024-08-01T14:32:02.642Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-08-01T02:15:01.950

Modified: 2025-02-17T06:15:12.527

Link: CVE-2024-39607

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses