CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-40069
Critical (9.8) in elecom. EPSS 1.5% chance of exploitation in the next 30 days.
OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions.
Severity
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- elecom:wrc-1167ghbk2_firmware
- elecom:wrc-1750ghbk-e_firmware
- elecom:wrc-1750ghbk2-i_firmware
- elecom:wrc-1750ghbk_firmware
- elecom:wrc-f1167acf_firmware