Code injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute arbitrary code by sending a specially crafted request. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, and WRC-1167FEBK-A v1.18 and earlier.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WRC-1167GHBK-S
Vendor
ELECOM CO.,LTD.
Product
WRC-1167GHBK-S
Platforms
Unknown
Default status
Unknown
WRC-1167GHBK-S · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
v1.03 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
WRC-1167GEBK-S
Vendor
ELECOM CO.,LTD.
Product
WRC-1167GEBK-S
Platforms
Unknown
Default status
Unknown
WRC-1167GEBK-S · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
v1.03 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
WRC-1167FEBK-S
Vendor
ELECOM CO.,LTD.
Product
WRC-1167FEBK-S
Platforms
Unknown
Default status
Unknown
WRC-1167FEBK-S · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
v1.04 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
WRC-1167GHBK3-A
Vendor
ELECOM CO.,LTD.
Product
WRC-1167GHBK3-A
Platforms
Unknown
Default status
Unknown
WRC-1167GHBK3-A · Scoped product and version facts