Elecom Wrc-1750ghbk Firmware vulnerabilities

3 CVEs affecting Elecom Wrc-1750ghbk Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-43757, published 2023-11-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-40069, published 2023-08-18. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected…
CVE-2023-39944, published 2023-08-18. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitrary OS command by sending a specially…
CVE-2023-43757, published 2023-11-16. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key…