Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/vu/JVNVU91630351/ | Third Party Advisory |
| https://www.elecom.co.jp/news/security/20230810-01/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
24 Aug 2023, 18:26
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.0 |
| References | (MISC) https://www.elecom.co.jp/news/security/20230810-01/ - Vendor Advisory | |
| References | (MISC) https://jvn.jp/en/vu/JVNVU91630351/ - Third Party Advisory | |
| CPE | cpe:2.3:o:elecom:lan-wh300n\/re_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:elecom:lan-wh300n\/re:-:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-Other | |
| First Time |
Elecom lan-wh300n\/re Firmware
Elecom Elecom lan-wh300n\/re |
18 Aug 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-18 10:15
Updated : 2024-10-08 15:35
NVD link : CVE-2023-38576
Mitre link : CVE-2023-38576
JSON object : View
Products Affected
elecom
- lan-wh300n\/re
- lan-wh300n\/re_firmware
CWE
