CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.0. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-37566
Severity
HIGH
CVSS
8
EPSS
1.12%
Original NVD Description
Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, and LAN-W301NR all versions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)