Vulnerabilities > Elecom

DATE CVE VULNERABILITY TITLE RISK
2023-11-16 CVE-2023-43757 Inadequate Encryption Strength vulnerability in Elecom products
Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD.
low complexity
elecom CWE-326
6.5
2023-08-18 CVE-2023-32626 Unspecified vulnerability in Elecom Lan-W300N/Pr5 Firmware and Lan-W300N/Rs Firmware
Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.
network
low complexity
elecom
critical
9.8
2023-08-18 CVE-2023-35991 Unspecified vulnerability in Elecom products
Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.
network
low complexity
elecom
critical
9.8
2023-08-18 CVE-2023-38132 Unspecified vulnerability in Elecom Lan-W451Ngr Firmware
LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service.
low complexity
elecom
8.8
2023-08-18 CVE-2023-38576 Unspecified vulnerability in Elecom Lan-Wh300N/Re Firmware
Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console.
low complexity
elecom
8.0
2023-08-18 CVE-2023-39445 Unspecified vulnerability in Elecom products
Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.
low complexity
elecom
8.8
2023-08-18 CVE-2023-39454 Classic Buffer Overflow vulnerability in Elecom products
Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.
network
low complexity
elecom CWE-120
critical
9.8
2023-08-18 CVE-2023-39455 OS Command Injection vulnerability in Elecom products
OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request.
network
low complexity
elecom CWE-78
8.8
2023-08-18 CVE-2023-39944 OS Command Injection vulnerability in Elecom Wrc-1750Ghbk Firmware and Wrc-F1167Acf Firmware
OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request.
network
low complexity
elecom CWE-78
8.8
2023-08-18 CVE-2023-40069 OS Command Injection vulnerability in Elecom products
OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request.
network
low complexity
elecom CWE-78
critical
9.8