Elecom Wrc-1467ghbk-A Firmware vulnerabilities

3 CVEs affecting Elecom Wrc-1467ghbk-A Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-39455, published 2023-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-39455, published 2023-08-18. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and…
CVE-2021-20644, published 2021-02-12. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page.
CVE-2023-39445, published 2023-08-18. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to…