CVE-2023-39454: ELECOM CO.,LTD. WRC-X1800GS-B, грешка в паметта

Описание

Оригинално описание

Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.

Засегнати продукти

• ELECOM CO.,LTD. WRC-X1800GS-B: v1.13 and earlier
• ELECOM CO.,LTD. WRC-X1800GSA-B: v1.13 and earlier
• ELECOM CO.,LTD. WRC-X1800GSH-B: v1.13 and earlier
• ELECOM CO.,LTD. WRC-X6000QS-G: v1.13 and earlier
• ELECOM CO.,LTD. WRC-X6000QSA-G: v1.13 and earlier
• ELECOM CO.,LTD. WRC-X3000GS3-B: v1.05 and earlier
• ELECOM CO.,LTD. WRC-X3000GS3A-B: v1.05 and earlier
• ELECOM CO.,LTD. WMC-2LX-B: v1.42 and earlier
• ELECOM CO.,LTD. WMC-X1800GST-B: v1.42 and earlier
• ELECOM CO.,LTD. WSC-X1800GS-B: v1.42 and earlier
• ELECOM CO.,LTD. WMC-2LX2-B: v1.16
• ELECOM CO.,LTD. WMC-X1800GST2-B: v1.16
• ELECOM CO.,LTD. WSC-X1800GS2-B: v1.16
• elecom wrc-x1800gs-b: преди 1.13
• elecom wrc-x1800gsa-b: преди 1.13
• elecom wrc-x1800gsh-b: преди 1.13

Вид слабост

• CWE-120 Копиране в буфер без проверка на размера на входа

История

Други уязвимости в ELECOM CO.,LTD. WRC-X1800GS-B

• 8.6CVE-2026-59764
• 6.9CVE-2026-25107
• 8.6CVE-2026-22550
• 5.1CVE-2026-20704
• 6.5CVE-2024-40883

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-39454
• https://nvd.nist.gov/vuln/detail/CVE-2023-39454
• https://www.elecom.co.jp/news/security/20230711-01/
• https://jvn.jp/en/vu/JVNVU91630351/