deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-26564
Published: 2023-07-12
Description: The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://ej2.syncfusion.com/documentation/file-manager/file-system-provider/; https://github.com/RupturaInfoSec/CVE-2023-26563-26564-26565/; https://github.com/SyncfusionExamples/ej2-aspcore-file-provider
CVE: CVE-2023-33274
Published: 2023-07-12
Description: The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper identification or authorization. This vulnerability arises from a lack of proper cookie verification and affects all instances of SNMP Web Pro 1.1 without HTTP Digest authentication enabled, regardless of the password used for the web interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://gist.github.com/pedromonteirobb/a0584095b46141702c8cae0f3f1b6759; https://gist.github.com/pedromonteirobb/a0584095b46141702c8cae0f3f1b6759
CVE: CVE-2021-0948
Published: 2023-07-13
Description: The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/2023-07-01; https://source.android.com/security/bulletin/2023-07-01
CVE: CVE-2023-20918
Published: 2023-07-13
Description: In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://android.googlesource.com/platform/frameworks/base/+/16c604aa7c253ce5cf075368a258c0b21386160d; https://android.googlesource.com/platform/frameworks/base/+/51051de4eb40bb502db448084a83fd6cbfb7d3cf; https://android.googlesource.com/platform/frameworks/base/+/8418e3a017428683d173c0c82b0eb02d5b923a4e
CVE: CVE-2023-20942
Published: 2023-07-13
Description: In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-326
References: https://android.googlesource.com/platform/frameworks/av/+/770b45c3c1619cf4008b89e7a0f4392bf2224bbc; https://android.googlesource.com/platform/frameworks/av/+/b[PII_REDACTED]58c41c87d2baa572dc2fe6da9ea6b; https://android.googlesource.com/platform/frameworks/av/+/bae3b00a5873d1562679a1289fd8490178cfe064
CVE: CVE-2023-21145
Published: 2023-07-13
Description: In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-326
References: https://android.googlesource.com/platform/frameworks/base/+/44aeef1b82ecf21187d4903c9e3666a118bdeaf3; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/frameworks/base/+/44aeef1b82ecf21187d4903c9e3666a118bdeaf3
CVE: CVE-2023-21238
Published: 2023-07-13
Description: In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-384
References: https://android.googlesource.com/platform/frameworks/base/+/91bfcbbd[PII_REDACTED]8142618a655352b16cd911; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/frameworks/base/+/91bfcbbd[PII_REDACTED]8142618a655352b16cd911
CVE: CVE-2023-21239
Published: 2023-07-13
Description: In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-384
References: https://android.googlesource.com/platform/frameworks/base/+/c451aa5710e1da19139eb3716e39a5d6f04de5c2; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/frameworks/base/+/c451aa5710e1da19139eb3716e39a5d6f04de5c2
CVE: CVE-2023-21240
Published: 2023-07-13
Description: In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://android.googlesource.com/platform/packages/modules/Wifi/+/69119d1d3102e27b6473c[PII_REDACTED]81bce9563; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/packages/modules/Wifi/+/69119d1d3102e27b6473c[PII_REDACTED]81bce9563
CVE: CVE-2023-21241
Published: 2023-07-13
Description: In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://android.googlesource.com/platform/system/nfc/+/907d17eeefec6f672ea824e126406e6d8f6b56d8; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/system/nfc/+/907d17eeefec6f672ea824e126406e6d8f6b56d8
CVE: CVE-2023-21243
Published: 2023-07-13
Description: In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://android.googlesource.com/platform/packages/modules/Wifi/+/5b49b8711efaadadf5052ba85288860c2d7ca7a6; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/packages/modules/Wifi/+/5b49b8711efaadadf5052ba85288860c2d7ca7a6
CVE: CVE-2023-21245
Published: 2023-07-13
Description: In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://android.googlesource.com/platform/frameworks/base/+/a33159e8cb297b9eee6fa5c63c0e343d05fad622; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/frameworks/base/+/a33159e8cb297b9eee6fa5c63c0e343d05fad622
CVE: CVE-2023-21246
Published: 2023-07-13
Description: In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 3.3 (LOW)
CWE: CWE-754, CWE-273
References: https://android.googlesource.com/platform/frameworks/base/+/fc1b9998ca8a9fceba47d67fd9ea9b45705b53e0; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/frameworks/base/+/fc1b9998ca8a9fceba47d67fd9ea9b45705b53e0
CVE: CVE-2023-21247
Published: 2023-07-13
Description: In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://android.googlesource.com/platform/packages/apps/Settings/+/edd4023805bc7fa54ae31de222cde02b9012bbc4; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/packages/apps/Settings/+/edd4023805bc7fa54ae31de222cde02b9012bbc4
CVE: CVE-2023-21248
Published: 2023-07-13
Description: In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://android.googlesource.com/platform/packages/apps/Settings/+/edd4023805bc7fa54ae31de222cde02b9012bbc4; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/packages/apps/Settings/+/edd4023805bc7fa54ae31de222cde02b9012bbc4
CVE: CVE-2023-21249
Published: 2023-07-13
Description: In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281
References: https://android.googlesource.com/platform/frameworks/base/+/c00b7e7dbc1fa30339adef693d02a51254755d7f; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/frameworks/base/+/c00b7e7dbc1fa30339adef693d02a51254755d7f
CVE: CVE-2023-21250
Published: 2023-07-13
Description: In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ec573bc83f1ed6722f7cb29431dcb2db7f10bf28; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ec573bc83f1ed6722f7cb29431dcb2db7f10bf28
CVE: CVE-2023-21251
Published: 2023-07-13
Description: In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.


CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: https://android.googlesource.com/platform/frameworks/base/+/57946e2bb73850e817b3c01fa5350d705e178e39; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/frameworks/base/+/57946e2bb73850e817b3c01fa5350d705e178e39
CVE: CVE-2023-21254
Published: 2023-07-13
Description: In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://android.googlesource.com/platform/frameworks/base/+/fa539c85503dc63bfb53c76b6f12b3549f14a709; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/frameworks/base/+/fa539c85503dc63bfb53c76b6f12b3549f14a709
CVE: CVE-2023-21255
Published: 2023-07-13
Description: In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://android.googlesource.com/kernel/common/+/1ca1130ec62d; https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-21256
Published: 2023-07-13
Description: In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://android.googlesource.com/platform/packages/apps/Settings/+/62fc1d269f5e754fc8f00b6167d79c3933b4c1f4; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/packages/apps/Settings/+/62fc1d269f5e754fc8f00b6167d79c3933b4c1f4
CVE: CVE-2023-21257
Published: 2023-07-13
Description: In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://android.googlesource.com/platform/frameworks/base/+/1aec7feaf07e6d4568ca75d18158445dbeac10f6; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/frameworks/base/+/1aec7feaf07e6d4568ca75d18158445dbeac10f6
CVE: CVE-2023-21261
Published: 2023-07-13
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2023-21262
Published: 2023-07-13
Description: In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This could lead to false user expectations. User interaction is needed for exploitation.


CVSS Score: 3.1 (LOW)
CWE: CWE-362
References: https://android.googlesource.com/platform/frameworks/av/+/2c8973c39478cd3c8cf11d9f27cc0556a106d006; https://source.android.com/security/bulletin/2023-07-01; https://android.googlesource.com/platform/frameworks/av/+/2c8973c39478cd3c8cf11d9f27cc0556a106d006
CVE: CVE-2023-21399
Published: 2023-07-13
Description: there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-327
References: https://source.android.com/security/bulletin/pixel/2023-07-01; https://source.android.com/security/bulletin/pixel/2023-07-01
CVE: CVE-2023-21400
Published: 2023-07-13
Description: In multiple functions  of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-667
References: http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html; http://www.openwall.com/lists/oss-security/2023/07/14/2; http://www.openwall.com/lists/oss-security/2023/07/19/2
CVE: CVE-2023-34123
Published: 2023-07-13
Description: Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.


CVSS Score: 7.5 (HIGH)
CWE: CWE-321, CWE-798
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010; https://www.sonicwall.com/support/notices/[PII_REDACTED]18060; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010
CVE: CVE-2023-35691
Published: 2023-07-13
Description: there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.2 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-07-01; https://source.android.com/security/bulletin/pixel/2023-07-01
CVE: CVE-2023-35693
Published: 2023-07-13
Description: In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://android.googlesource.com/kernel/common/+/8ff940b3513cb; https://source.android.com/security/bulletin/pixel/2023-07-01; https://android.googlesource.com/kernel/common/+/8ff940b3513cb
CVE: CVE-2023-35694
Published: 2023-07-13
Description: In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-07-01; https://source.android.com/security/bulletin/pixel/2023-07-01
CVE: CVE-2023-21260
Published: 2023-07-13
Description: In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and possibly contains mis-leading information to be appeared as a system message for user confirmation.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-346
References: https://source.android.com/security/bulletin/aaos/2023-07-01; https://source.android.com/security/bulletin/aaos/2023-07-01
CVE: CVE-2023-34124
Published: 2023-07-13
Description: The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-305, CWE-287
References: http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010; https://www.sonicwall.com/support/notices/[PII_REDACTED]18060
CVE: CVE-2023-34125
Published: 2023-07-13
Description: Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-27, CWE-22
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010; https://www.sonicwall.com/support/notices/[PII_REDACTED]18060; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010
CVE: CVE-2023-34126
Published: 2023-07-13
Description: Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010; https://www.sonicwall.com/support/notices/[PII_REDACTED]18060; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010
CVE: CVE-2023-34127
Published: 2023-07-13
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to execute arbitrary code with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010; https://www.sonicwall.com/support/notices/[PII_REDACTED]18060
CVE: CVE-2023-34128
Published: 2023-07-13
Description: Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-260, CWE-522
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010; https://www.sonicwall.com/support/notices/[PII_REDACTED]18060; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010
CVE: CVE-2023-2190
Published: 2023-07-13
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.10 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. It may be possible for users to view new commits to private projects in a fork created while the project was public.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://gitlab.com/gitlab-org/gitlab/-/issues/408137; https://hackerone.com/reports/1944500; https://gitlab.com/gitlab-org/gitlab/-/issues/408137
CVE: CVE-2023-34129
Published: 2023-07-13
Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.


CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010; https://www.sonicwall.com/support/notices/[PII_REDACTED]18060; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010
CVE: CVE-2023-34130
Published: 2023-07-13
Description: SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-327, CWE-327
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010; https://www.sonicwall.com/support/notices/[PII_REDACTED]18060; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010
CVE: CVE-2023-37560
Published: 2023-07-13
Description: Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN05223215/; https://www.elecom.co.jp/news/security/20230711-01/; https://jvn.jp/en/jp/JVN05223215/
CVE: CVE-2023-37561
Published: 2023-07-13
Description: Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12 and earlier, WTC-300HWH v1.09 and earlier, WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier.

CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://jvn.jp/en/jp/JVN05223215/; https://www.elecom.co.jp/news/security/20230711-01/; https://jvn.jp/en/jp/JVN05223215/