CVE-2023-37561: ELECOM CO.,LTD. WRH-300WH-H

Описание

Оригинално описание

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affected products and versions are as follows: WRH-300WH-H v2.12 and earlier, WTC-300HWH v1.09 and earlier, WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier.

Засегнати продукти

• ELECOM CO.,LTD. WRH-300WH-H: v2.12 and earlier
• ELECOM CO.,LTD. WTC-300HWH: v1.09 and earlier
• ELECOM CO.,LTD. WTC-C1167GC-B: v1.17 and earlier
• ELECOM CO.,LTD. WTC-C1167GC-W: v1.17 and earlier

История

Други уязвимости в ELECOM CO.,LTD. WRH-300WH-H

• CVE-2023-43757
• CVE-2023-37562
• CVE-2023-37560

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-37561
• https://nvd.nist.gov/vuln/detail/CVE-2023-37561
• https://www.elecom.co.jp/news/security/20230711-01/
• https://jvn.jp/en/jp/JVN05223215/