Vulnerability Description
OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute an arbitrary OS command by sending a specially crafted request.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Elecom | Wrc-X3000Gs2-W Firmware | <= 1.05 |
| Elecom | Wrc-X3000Gs2-W | - |
| Elecom | Wrc-X3000Gs2-B Firmware | <= 1.05 |
| Elecom | Wrc-X3000Gs2-B | - |
| Elecom | Wrc-X3000Gs2A-B Firmware | <= 1.05 |
| Elecom | Wrc-X3000Gs2A-B | - |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/vu/JVNVU94119876/Third Party Advisory
- https://www.elecom.co.jp/news/security/20231114-01/Vendor Advisory
- https://jvn.jp/en/vu/JVNVU94119876/Third Party Advisory
- https://www.elecom.co.jp/news/security/20231114-01/Vendor Advisory
FAQ
What is CVE-2023-43752?
CVE-2023-43752 is a vulnerability with a CVSS score of 8.0 (HIGH). OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute ...
How severe is CVE-2023-43752?
CVE-2023-43752 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-43752?
Check the references section above for vendor advisories and patch information. Affected products include: Elecom Wrc-X3000Gs2-W Firmware, Elecom Wrc-X3000Gs2-W, Elecom Wrc-X3000Gs2-B Firmware, Elecom Wrc-X3000Gs2-B, Elecom Wrc-X3000Gs2A-B Firmware.