CVE-2023-37563
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
13/07/2023
Last modified:
06/11/2024
Description
ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1467GHBK-S all versions, WRC-1900GHBK-A all versions, and WRC-1900GHBK-S all versions.
Impact
Base Score 3.x
6.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:elecom:wrc-1167ghbk-s_firmware:*:*:*:*:*:*:*:* | 1.03 (including) | |
| cpe:2.3:h:elecom:wrc-1167ghbk-s:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:elecom:wrc-1167gebk-s:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:elecom:wrc-1167gebk-s_firmware:*:*:*:*:*:*:*:* | 1.03 (including) | |
| cpe:2.3:h:elecom:wrc-1167febk-s:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:elecom:wrc-1167febk-s_firmware:*:*:*:*:*:*:*:* | 1.04 (including) | |
| cpe:2.3:h:elecom:wrc-1167ghbk3-a:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:elecom:wrc-1167ghbk3-a_firmware:*:*:*:*:*:*:*:* | 1.24 (including) | |
| cpe:2.3:h:elecom:wrc-1167febk-a:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:elecom:wrc-1167febk-a_firmware:*:*:*:*:*:*:*:* | 1.18 (including) |
To consult the complete list of CPE names with products and versions, see this page