by Kastro
Paper/Archive/CVE-2023-39454

CVE-2023-39454

ELECOM CO.,LTD. WRC-X1800GS-B — Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 61.0.610 × 2012.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.

Affected

ProductAffectedFixed inSource
WRC-X1800GS-Bv1.13 and earlier–CNA
WRC-X1800GSA-Bv1.13 and earlier–CNA
WRC-X1800GSH-Bv1.13 and earlier–CNA
WRC-X6000QS-Gv1.13 and earlier–CNA
WRC-X6000QSA-Gv1.13 and earlier–CNA
WRC-X3000GS3-Bv1.05 and earlier–CNA
WRC-X3000GS3A-Bv1.05 and earlier–CNA
WMC-2LX-Bv1.42 and earlier–CNA
WMC-X1800GST-Bv1.42 and earlier–CNA
WSC-X1800GS-Bv1.42 and earlier–CNA
WMC-2LX2-Bv1.16–CNA
WMC-X1800GST2-Bv1.16–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcert (CNA)8.8CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refelecom.co.jp/news/security/20230711-01refjvn.jp/en/vu/JVNVU91630351