CVE-2023-37563

Medium

Description

ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S v1.04 and earlier, WRC-1167GHBK3-A v1.24 and earlier, WRC-1167FEBK-A v1.18 and earlier, WRC-F1167ACF2 all versions, WRC-600GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-1467GHBK-A all versions, WRC-1467GHBK-S all versions, WRC-1900GHBK-A all versions, and WRC-1900GHBK-S all versions.

SeverityMedium
CVSS6.5
Exploit probability—
ProductElecom Wrc-1167ghbk-s Firmware
PublishedJul 13, 2023
First seenJul 13, 2023
Weakness typeCWE-922CWE-922

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
elecom wrc-1167ghbk-s_firmwarev ≤ 1.03—
elecom wrc-1167gebk-s_firmwarev ≤ 1.03—
elecom wrc-1167febk-s_firmwarev ≤ 1.04—
elecom wrc-1167ghbk3-a_firmwarev ≤ 1.24—
elecom wrc-1167febk-a_firmwarev ≤ 1.18—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-37563 · Elecom Wrc-1167ghbk-s Firmware · Dark Radar