CVE-2023-37568

Severity: high (CVSS 8.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-13 · updated 2026-06-17
Weakness: CWE-77

Description

ELECOM wireless LAN routers WRC-1167GHBK-S v1.03 and earlier, and WRC-1167GEBK-S v1.03 and earlier allow a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page.

Affected products

Elecom Wrc-1167Gebk-S Firmware: through 1.03
Elecom Wrc-1167Ghbk-S Firmware: through 1.03

References

https://jvn.jp/en/vu/JVNVU91850798/
https://www.elecom.co.jp/news/security/20230711-01/
https://jvn.jp/en/vu/JVNVU91850798/
https://www.elecom.co.jp/news/security/20230711-01/

Get alerted when CVE-2023-37568 or the next vulnerability affects your stack