Sign-up

ID

VAR-202307-0615


CVE

CVE-2023-37563


TITLE

Elecom radio  LAN  router and wireless  LAN  Multiple vulnerabilities in repeaters

Trust: 0.8

sources: JVNDB: JVNDB-2023-000071

DESCRIPTION

ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1467GHBK-S all versions, WRC-1900GHBK-A all versions, and WRC-1900GHBK-S all versions. None

Trust: 1.71

sources: NVD: CVE-2023-37563 // JVNDB: JVNDB-2023-000071 // VULMON: CVE-2023-37563

AFFECTED PRODUCTS

vendor:elecommodel:wrc-1167gebk-sscope:lteversion:1.03

Trust: 1.0

vendor:elecommodel:wrc-1167febk-ascope:lteversion:1.18

Trust: 1.0

vendor:elecommodel:wrc-1167febk-sscope:lteversion:1.04

Trust: 1.0

vendor:elecommodel:wrc-1167ghbk-sscope:lteversion:1.03

Trust: 1.0

vendor:elecommodel:wrc-1167ghbk3-ascope:lteversion:1.24

Trust: 1.0

vendor:エレコム株式会社model:wrc-600ghbk-ascope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrc-1167ghbk-sscope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrc-733febk2-ascope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrc-f1167acfscope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wtc-300hwhscope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrc-1167ghbk3-ascope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wtc-c1167gc-wscope:lteversion:v1.17 and earlier s (cve-2023-37561,cve-2023-37562)

Trust: 0.8

vendor:エレコム株式会社model:wrc-1900ghbk-ascope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrc-1167febk-ascope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrc-1467ghbk-ascope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrc-1167gebk-sscope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrc-1167febk-sscope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrc-1467ghbk-sscope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrh-300wh-hscope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wtc-c1167gc-bscope: - version: -

Trust: 0.8

vendor:エレコム株式会社model:wrc-1900ghbk-sscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2023-000071 // NVD: CVE-2023-37563

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2023-37563
value: MEDIUM

Trust: 1.0

IPA: JVNDB-2023-000071
severity: LOW
baseScore: 3.3
vectorString: AV:A/AC:L/AU:N/C:P/I:N/A:N
accessVector: ADJACENT NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

NVD:
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 3.6
version: 3.1

Trust: 1.0

IPA: JVNDB-2023-000071
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2023-000071 // NVD: CVE-2023-37563

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:OS Command injection (CWE-78) [IPA evaluation ]

Trust: 0.8

problemtype: Cross-site scripting (CWE-79) [IPA evaluation ]

Trust: 0.8

problemtype: Code injection (CWE-94) [IPA evaluation ]

Trust: 0.8

problemtype: information leak (CWE-200) [IPA evaluation ]

Trust: 0.8

problemtype: Cross-site request forgery (CWE-352) [IPA evaluation ]

Trust: 0.8

problemtype: others (CWE-Other) [IPA evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2023-000071 // NVD: CVE-2023-37563

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202307-950

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2023-37563

PATCH
title:wireless LAN Request for firmware update to improve router/repeater security ELECOM CO., LTD.url:https://www.elecom.co.jp/news/security/20230711-01/
Trust: 0.8
title:ELECOM WRC-1167FEBK-A Security vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqbyid.tag?id=246118
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2023-000071 // 
            
            
            
            CNNVD: CNNVD-202307-950

EXTERNAL IDS
db:NVDid:CVE-2023-37563
Trust: 3.3
db:JVNid:JVN05223215
Trust: 2.5
db:JVNDBid:JVNDB-2023-000071
Trust: 1.4
db:CNNVDid:CNNVD-202307-950
Trust: 0.6
db:VULMONid:CVE-2023-37563
Trust: 0.1
sources:
            
            
            VULMON: CVE-2023-37563 // 
            
            
            
            JVNDB: JVNDB-2023-000071 // 
            
            
            
            CNNVD: CNNVD-202307-950 // 
            
            
            
            NVD: CVE-2023-37563

REFERENCES
url:https://www.elecom.co.jp/news/security/20230711-01/
Trust: 1.7
url:https://jvn.jp/en/jp/jvn05223215/
Trust: 1.7
url:https://www.elecom.co.jp/news/security/20230810-01/
Trust: 1.0
url:https://jvn.jp/jp/jvn05223215/index.html
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2023-37560
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2023-37561
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2023-37562
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2023-37563
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2023-37564
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2023-37565
Trust: 0.8
url:https://jvndb.jvn.jp/en/contents/2023/jvndb-2023-000071.html
Trust: 0.6
url:https://cxsecurity.com/cveshow/cve-2023-37563/
Trust: 0.6
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            VULMON: CVE-2023-37563 // 
            
            
            
            JVNDB: JVNDB-2023-000071 // 
            
            
            
            CNNVD: CNNVD-202307-950 // 
            
            
            
            NVD: CVE-2023-37563

SOURCES
db:VULMONid:CVE-2023-37563
db:JVNDBid:JVNDB-2023-000071
db:CNNVDid:CNNVD-202307-950
db:NVDid:CVE-2023-37563

LAST UPDATE DATE
2024-03-29T22:36:08.310000+00:00

SOURCES UPDATE DATE
db:VULMONid:CVE-2023-37563date:2023-07-13T00:00:00
db:JVNDBid:JVNDB-2023-000071date:2024-03-29T06:15:00
db:CNNVDid:CNNVD-202307-950date:2023-07-14T00:00:00
db:NVDid:CVE-2023-37563date:2023-08-18T10:15:10.483

SOURCES RELEASE DATE
db:VULMONid:CVE-2023-37563date:2023-07-13T00:00:00
db:JVNDBid:JVNDB-2023-000071date:2023-07-11T00:00:00
db:CNNVDid:CNNVD-202307-950date:2023-07-11T00:00:00
db:NVDid:CVE-2023-37563date:2023-07-13T03:15:09.927