by Kastro
Paper/Archive/CVE-2023-35991

CVE-2023-35991

LOGITEC CORPORATION LAN-W300N/DR — Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain…

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 54.0.540 × 2010.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions.

Affected

ProductAffectedFixed inSource
LAN-W300N/DRall versions–CNA
LAN-WH300N/DRall versions–CNA
LAN-W300N/Pall versions–CNA
LAN-WH450N/GPall versions–CNA
LAN-WH300AN/DGPall versions–CNA
LAN-WH300N/DGPall versions–CNA
LAN-WH300ANDGPEall versions–CNA
lan-wh450n\/gp_firmwareall versions–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP8.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refelecom.co.jp/news/security/20230810-01refjvn.jp/en/vu/JVNVU91630351