CVE-2023-38576

Published: Aug 18, 2023Modified: Jun 17, 2026

8.0

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: NVD

Description

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console.

Affected (1)

Products: Elecom: Lan Wh300n/re Firmware

Elecom

1 product

Lan Wh300n/re Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Lan Wh300n/re Firmware	All versions

Running on/with	Platform Versions
Elecom Lan Wh300n/re	All versions

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (4)

https://jvn.jp/en/vu/JVNVU91630351/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.elecom.co.jp/news/security/20230810-01/

Source: vultures@jpcert.or.jp

Vendor Advisory

https://jvn.jp/en/vu/JVNVU91630351/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.elecom.co.jp/news/security/20230810-01/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.