Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37549 State: PUBLISHED Published: 2023-08-03T11:02:33.725Z Last Updated: 2024-10-11T18:12:01.720Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37548 and CVE-2023-37550 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
VE-2023-37548 and CVE-2023-37550 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-019
CVE ID: CVE-2023-37550 State: PUBLISHED Published: 2023-08-03T11:03:09.222Z Last Updated: 2024-10-11T18:11:18.756Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37548 and CVE-2023-37549. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
VE-2023-37548 and CVE-2023-37549. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-019
CVE ID: CVE-2023-37551 State: PUBLISHED Published: 2023-08-03T11:03:37.457Z Last Updated: 2024-10-11T18:10:51.431Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-552 Description: In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to download files with any file extensions to the controller. In contrast to the regular file download via CmpFileTransfer, no filtering of certain file types is performed here. As a result, the integrity of the CODESYS control runtime system may be compromised by the files loaded onto the controller. Additional Analyst No
of the CODESYS control runtime system may be compromised by the files loaded onto the controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-019/
CVE ID: CVE-2023-37552 State: PUBLISHED Published: 2023-08-03T11:04:04.128Z Last Updated: 2024-10-11T18:10:33.714Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37553, CVE-2023-37554, CVE-2023-37555 and CVE-2023-37556. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ce
and CVE-2023-37556. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-019/
CVE ID: CVE-2023-37553 State: PUBLISHED Published: 2023-08-03T11:04:39.061Z Last Updated: 2024-10-11T18:10:16.403Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37554, CVE-2023-37555 and CVE-2023-37556. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ce
CVE ID: CVE-2023-37554 State: PUBLISHED Published: 2023-08-03T11:05:09.750Z Last Updated: 2024-10-11T18:09:34.979Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37555 and CVE-2023-37556. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ce
CVE ID: CVE-2023-37555 State: PUBLISHED Published: 2023-08-03T11:05:33.660Z Last Updated: 2024-10-09T20:52:51.974Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37556. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ce
CVE ID: CVE-2023-37556 State: PUBLISHED Published: 2023-08-03T11:05:52.986Z Last Updated: 2024-10-09T20:52:36.722Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37555. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ce
and CVE-2023-37555. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-019/
CVE ID: CVE-2023-37557 State: PUBLISHED Published: 2023-08-03T11:06:17.884Z Last Updated: 2024-10-09T20:52:16.817Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-787 Description: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-019/
CVE ID: CVE-2023-37558 State: PUBLISHED Published: 2023-08-03T11:06:36.112Z Last Updated: 2024-10-11T18:09:20.780Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37559 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-019/
CVE ID: CVE-2023-37559 State: PUBLISHED Published: 2023-08-03T11:06:56.079Z Last Updated: 2024-10-11T18:09:05.823Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HM
ol RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS Development System V3, CODESYS HMI (SL), CODESYS Safety SIL2 Runtime Toolkit Problem Types: CWE-20 Description: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37558 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-019/
CVE ID: CVE-2023-37560 State: PUBLISHED Published: 2023-07-13T01:16:30.201Z Last Updated: 2024-11-05T15:32:43.694Z Vendors: ELECOM CO.,LTD. Products: WRH-300WH-H, WTC-300HWH Problem Types: Cross-site scripting (XSS) Description: Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote unauthenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230711-01/ - https://jvn.jp/en/jp/JVN05223215/
CVE ID: CVE-2023-37561 State: PUBLISHED Published: 2023-07-13T01:20:06.348Z Last Updated: 2024-11-05T15:27:17.993Z Vendors: ELECOM CO.,LTD. Products: WRH-300WH-H, WTC-300HWH, WTC-C1167GC-B, WTC-C1167GC-W Problem Types: Open Redirect Description: Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12 and earlier, WTC-300HWH v1.09 and earlier, WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier. Additional Analyst Notes: - CVE Program Con
rlier, WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230711-01/ - https://jvn.jp/en/jp/JVN05223215/
CVE ID: CVE-2023-37562 State: PUBLISHED Published: 2023-07-13T02:55:50.990Z Last Updated: 2024-11-06T15:32:20.438Z Vendors: ELECOM CO.,LTD. Products: WTC-C1167GC-B, WTC-C1167GC-W Problem Types: Cross-site request forgery (CSRF) Description: Cross-site request forgery (CSRF) vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier. If a user views a malicious page while logged in, unintended operations may be performed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230711-01/ - https://jvn.jp/en/jp/JVN05223215/
CVE ID: CVE-2023-37563 State: PUBLISHED Published: 2023-07-13T02:59:04.187Z Last Updated: 2024-11-06T18:07:10.705Z Vendors: ELECOM CO.,LTD. Products: WRC-1167GHBK-S, WRC-1167GEBK-S, WRC-1167FEBK-S, WRC-1167GHBK3-A, WRC-1167FEBK-A, WRC-F1167ACF2, WRC-600GHBK-A, WRC-733FEBK2-A, WRC-1467GHBK-A, WRC-1467GHBK-S, WRC-1900GHBK-A, WRC-1900GHBK-S Problem Types: Information disclosure Description: ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earl
rsions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1467GHBK-S all versions, WRC-1900GHBK-A all versions, and WRC-1900GHBK-S all versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230810-01/ - https://www.elecom.co.jp/news/security/20230711-01/ - https://jvn.jp/en/jp/JVN05223215/
CVE ID: CVE-2023-37564 State: PUBLISHED Published: 2023-07-13T03:01:41.200Z Last Updated: 2024-11-06T15:24:49.122Z Vendors: ELECOM CO.,LTD. Products: WRC-1167GHBK-S, WRC-1167GEBK-S, WRC-1167FEBK-S, WRC-1167GHBK3-A, WRC-1167FEBK-A Problem Types: OS command injection Description: OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OS command with a root privilege by sending a specially crafted request. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, and WRC-1167FEBK-A v1.18
GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, and WRC-1167FEBK-A v1.18 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230711-01/ - https://jvn.jp/en/jp/JVN05223215/
CVE ID: CVE-2023-37565 State: PUBLISHED Published: 2023-07-13T03:04:25.910Z Last Updated: 2024-11-07T14:48:22.907Z Vendors: ELECOM CO.,LTD. Products: WRC-1167GHBK-S, WRC-1167GEBK-S, WRC-1167FEBK-S, WRC-1167GHBK3-A, WRC-1167FEBK-A Problem Types: Code injection Description: Code injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute arbitrary code by sending a specially crafted request. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, and WRC-1167FEBK-A v1.18 and earlier. Additional Analyst Notes: - CV
.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, and WRC-1167FEBK-A v1.18 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230711-01/ - https://jvn.jp/en/jp/JVN05223215/
CVE ID: CVE-2023-37566 State: PUBLISHED Published: 2023-07-13T01:44:48.791Z Last Updated: 2024-11-06T18:19:31.073Z Vendors: ELECOM CO.,LTD., LOGITEC CORPORATION Products: WRC-1167GHBK3-A, WRC-1167FEBK-A, WRC-F1167ACF2, WRC-600GHBK-A, WRC-733FEBK2-A, WRC-1467GHBK-A, WRC-1900GHBK-A, LAN-W301NR Problem Types: Arbitrary command execution Description: Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF
products and versions are as follows: WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, and LAN-W301NR all versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230810-01/ - https://www.elecom.co.jp/news/security/20230711-01/ - https://jvn.jp/en/vu/JVNVU91850798/
CVE ID: CVE-2023-37567 State: PUBLISHED Published: 2023-07-13T01:46:47.274Z Last Updated: 2024-11-06T14:28:41.455Z Vendors: ELECOM CO.,LTD., LOGITEC CORPORATION Products: WRC-1167GHBK3-A, WRC-F1167ACF2, WRC-600GHBK-A, WRC-733FEBK2-A, WRC-1467GHBK-A, WRC-1900GHBK-A, LAN-W301NR Problem Types: Arbitrary command execution Description: Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port of the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A v1.24 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versio
cts and versions are as follows: WRC-1167GHBK3-A v1.24 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, and LAN-W301NR all versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230810-01/ - https://www.elecom.co.jp/news/security/20230711-01/ - https://jvn.jp/en/vu/JVNVU91850798/