What’s Vulnerable › Vulnerabilities

CVE-2023-43757

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-16 · updated 2026-06-17
• Weakness: CWE-326

Description

Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.

Affected products

• Elecom Lan-W300N/P Firmware: all versions
• Elecom Lan-W300N/Rs Firmware: all versions
• Elecom Lan-W301Nr Firmware: all versions
• Elecom Lan-Wh300N/Dgp Firmware: all versions
• Elecom Lan-Wh300Ndgpe Firmware: all versions
• Elecom Wrc-1167Ghbk2 Firmware: all versions
• Elecom Wrc-1167Ghbk Firmware: all versions
• Elecom Wrc-1750Ghbk-E Firmware: all versions
• Elecom Wrc-1750Ghbk2-I Firmware: all versions
• Elecom Wrc-1750Ghbk Firmware: all versions
• Elecom Wrc-2533Ghbk-I Firmware: all versions
• Elecom Wrc-2533Ghbk2-T Firmware: all versions
• Elecom Wrc-300Febk Firmware: all versions
• Elecom Wrc-300Ghbk2-I Firmware: all versions
• Elecom Wrc-300Ghbk Firmware: all versions
• Elecom Wrc-733Febk Firmware: all versions
• Elecom Wrc-733Ghbk-C Firmware: all versions
• Elecom Wrc-733Ghbk-I Firmware: all versions
• Elecom Wrc-733Ghbk Firmware: all versions
• Elecom Wrc-F1167Acf Firmware: all versions
• Elecom Wrc-F300Nf Firmware: all versions
• Elecom Wrh-150Bk Firmware: all versions
• Elecom Wrh-150Wh Firmware: all versions
• Elecom Wrh-300Bk-S Firmware: all versions
• Elecom Wrh-300Bk2-S Firmware: all versions
• Elecom Wrh-300Bk Firmware: all versions
• Elecom Wrh-300Rd Firmware: all versions
• Elecom Wrh-300Sv Firmware: all versions
• Elecom Wrh-300Wh-H Firmware: all versions
• Elecom Wrh-300Wh-S Firmware: all versions

References

• https://jvn.jp/en/vu/JVNVU94119876/
• https://www.elecom.co.jp/news/security/20210706-01/
• https://www.elecom.co.jp/news/security/20230810-01/
• https://www.elecom.co.jp/news/security/20231114-01/
• https://jvn.jp/en/vu/JVNVU94119876/
• https://www.elecom.co.jp/news/security/20210706-01/
• https://www.elecom.co.jp/news/security/20230810-01/
• https://www.elecom.co.jp/news/security/20231114-01/

Get alerted when CVE-2023-43757 or the next vulnerability affects your stack