CVE-2023-43752

Summary

OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute an arbitrary OS command by sending a specially crafted request.

Affected Software

VendorProductVersion RangeStatus
ELECOM CO.,LTD.WRC-X3000GS2-Wv1.05 and earlieraffected
ELECOM CO.,LTD.WRC-X3000GS2-Bv1.05 and earlieraffected
ELECOM CO.,LTD.WRC-X3000GS2A-Bv1.05 and earlieraffected

Weaknesses

  • OS command injection

ADP Enrichment

CVE Program Container

Additional References

References