CVE-2023-43757

Published: Nov 16, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.

Affected (34)

Products: Elecom: Wrc 2533ghbk2 T Firmware, Wrc 2533ghbk I Firmware, Wrc 1750ghbk2 I Firmware, Wrc 1750ghbk E Firmware, Wrc 1750ghbk Firmware, Wrc 1167ghbk2 Firmware, Wrc 1167ghbk Firmware, Wrc F1167acf Firmware, Wrc 733ghbk Firmware, Wrc 733ghbk I Firmware, Wrc 733ghbk C Firmware, Wrc 300ghbk2 I Firmware, Wrc 300ghbk Firmware, Wrc 733febk Firmware, Wrc 300febk Firmware, Wrc F300nf Firmware, Wrh 300wh H Firmware, Wrh 300bk Firmware, Wrh 300wh Firmware, Wrh 300rd Firmware, Wrh 300sv Firmware, Wrh 300bk S Firmware, Wrh 300wh S Firmware, Wrh 300bk2 S Firmware, Wrh 300wh2 S Firmware, Wrh H300bk Firmware, Wrh H300wh Firmware, Wrh 150bk Firmware, Wrh 150wh Firmware, Lan W300n/rs Firmware, Lan W301nr Firmware, Lan W300n/p Firmware, Lan Wh300n/dgp Firmware, Lan Wh300ndgpe Firmware

Elecom

34 products

Wrc 2533ghbk2 T Firmware

Wrc 2533ghbk I Firmware

Wrc 1750ghbk2 I Firmware

Wrc 1750ghbk E Firmware

Wrc 1750ghbk Firmware

Wrc 1167ghbk2 Firmware

Wrc 1167ghbk Firmware

Wrc F1167acf Firmware

Wrc 733ghbk Firmware

Wrc 733ghbk I Firmware

Wrc 733ghbk C Firmware

Wrc 300ghbk2 I Firmware

Wrh 300bk2 S Firmware

Wrh 300wh2 S Firmware

Lan W300n/rs Firmware

Lan W301nr Firmware

Lan W300n/p Firmware

Lan Wh300n/dgp Firmware

Lan Wh300ndgpe Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 2533ghbk2 T Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 2533ghbk2 T	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 2533ghbk I Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 2533ghbk I	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 1750ghbk2 I Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 1750ghbk2 I	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 1750ghbk E Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 1750ghbk E	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 1750ghbk Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 1750ghbk	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 1167ghbk2 Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 1167ghbk2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 1167ghbk Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 1167ghbk	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc F1167acf Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc F1167acf	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 733ghbk Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 733ghbk	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 733ghbk I Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 733ghbk I	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 733ghbk C Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 733ghbk C	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 300ghbk2 I Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 300ghbk2 I	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 300ghbk Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 300ghbk	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 733febk Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 733febk	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc 300febk Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc 300febk	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrc F300nf Firmware	All versions

Running on/with	Platform Versions
Elecom Wrc F300nf	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 300wh H Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 300wh H	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 300bk Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 300bk	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 300wh Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 300wh	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 300rd Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 300rd	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 300sv Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 300sv	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 300bk S Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 300bk S	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 300wh S Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 300wh S	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 300bk2 S Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 300bk2 S	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 300wh2 S Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 300wh2 S	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh H300bk Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh H300bk	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh H300wh Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh H300wh	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 150bk Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 150bk	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Wrh 150wh Firmware	All versions

Running on/with	Platform Versions
Elecom Wrh 150wh	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Lan W300n/rs Firmware	All versions

Running on/with	Platform Versions
Elecom Lan W300n/rs	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Lan W301nr Firmware	All versions

Running on/with	Platform Versions
Elecom Lan W301nr	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Lan W300n/p Firmware	All versions

Running on/with	Platform Versions
Elecom Lan W300n/p	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Lan Wh300n/dgp Firmware	All versions

Running on/with	Platform Versions
Elecom Lan Wh300n/dgp	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Elecom Lan Wh300ndgpe Firmware	All versions

Running on/with	Platform Versions
Elecom Lan Wh300ndgpe	All versions

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (8)

https://jvn.jp/en/vu/JVNVU94119876/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.elecom.co.jp/news/security/20210706-01/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.elecom.co.jp/news/security/20230810-01/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.elecom.co.jp/news/security/20231114-01/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://jvn.jp/en/vu/JVNVU94119876/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.elecom.co.jp/news/security/20210706-01/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.elecom.co.jp/news/security/20230810-01/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.elecom.co.jp/news/security/20231114-01/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.