6.5

CVE-2023-37563

ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1467GHBK-S all versions, WRC-1900GHBK-A all versions, and WRC-1900GHBK-S all versions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Elecom ≫ Wrc-1167ghbk-s Firmware Version <= 1.03
   Elecom ≫ Wrc-1167ghbk-s Version-
Elecom ≫ Wrc-1167gebk-s Firmware Version <= 1.03
   Elecom ≫ Wrc-1167gebk-s Version-
Elecom ≫ Wrc-1167febk-s Firmware Version <= 1.04
   Elecom ≫ Wrc-1167febk-s Version-
Elecom ≫ Wrc-1167ghbk3-a Firmware Version <= 1.24
   Elecom ≫ Wrc-1167ghbk3-a Version-
Elecom ≫ Wrc-1167febk-a Firmware Version <= 1.18
   Elecom ≫ Wrc-1167febk-a Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.303
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-922 Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

https://jvn.jp/en/jp/JVN05223215/
Third Party Advisory