All the vulnerabilites related to ELECOM CO.,LTD. - WRH-300WH3 firmware
jvndb-2022-000010
Vulnerability from jvndb
Published
2022-02-08 16:13
Modified
2022-02-08 16:13
Severity ?
Summary
Multiple vulnerabilities in multiple ELECOM LAN routers
Details
Multiple ELECOM LAN routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below.
* Hidden functionality (CWE-912) - CVE-2022-21173
* Cross-site scripting (CWE-79) - CVE-2022-21799
CVE-2022-21173
Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
CVE-2022-21799
RyotaK reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
{ "@rdf:about": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000010.html", "dc:date": "2022-02-08T16:13+09:00", "dcterms:issued": "2022-02-08T16:13+09:00", "dcterms:modified": "2022-02-08T16:13+09:00", "description": "Multiple ELECOM LAN routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below.\r\n\r\n* Hidden functionality (CWE-912) - CVE-2022-21173\r\n* Cross-site scripting (CWE-79) - CVE-2022-21799\r\n\r\nCVE-2022-21173\r\nToshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.\r\n\r\nCVE-2022-21799\r\nRyotaK reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.", "link": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000010.html", "sec:cpe": [ { "#text": "cpe:/o:elecom:wrc-300febk-r_firmware", "@product": "WRC-300FEBK-R firmware", "@vendor": "ELECOM CO.,LTD.", "@version": "2.2" }, { "#text": "cpe:/o:elecom:wrh-300bk3-s_firmware", "@product": "WRH-300BK3-S firmware", "@vendor": "ELECOM CO.,LTD.", "@version": "2.2" }, { "#text": "cpe:/o:elecom:wrh-300bk3_firmware", "@product": "WRH-300BK3 firmware", "@vendor": "ELECOM CO.,LTD.", "@version": "2.2" }, { "#text": "cpe:/o:elecom:wrh-300dr3-s_firmware", "@product": "WRH-300DR3-S firmware", "@vendor": "ELECOM CO.,LTD.", "@version": "2.2" }, { "#text": "cpe:/o:elecom:wrh-300lb3-s_firmware", "@product": "WRH-300LB3-S firmware", "@vendor": "ELECOM CO.,LTD.", "@version": "2.2" }, { "#text": "cpe:/o:elecom:wrh-300pn3-s_firmware", "@product": "WRH-300PN3-S firmware", "@vendor": "ELECOM CO.,LTD.", "@version": "2.2" }, { "#text": "cpe:/o:elecom:wrh-300wh3-s_firmware", "@product": "WRH-300WH3-S firmware", "@vendor": "ELECOM CO.,LTD.", "@version": "2.2" }, { "#text": "cpe:/o:elecom:wrh-300wh3_firmware", "@product": "WRH-300WH3 firmware", "@vendor": "ELECOM CO.,LTD.", "@version": "2.2" }, { "#text": "cpe:/o:elecom:wrh-300yg3-s_firmware", "@product": "WRH-300YG3-S firmware", "@vendor": "ELECOM CO.,LTD.", "@version": "2.2" } ], "sec:cvss": [ { "@score": "8.3", "@severity": "High", "@type": "Base", "@vector": "AV:A/AC:L/Au:N/C:C/I:C/A:C", "@version": "2.0" }, { "@score": "8.8", "@severity": "High", "@type": "Base", "@vector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "@version": "3.0" } ], "sec:identifier": "JVNDB-2022-000010", "sec:references": [ { "#text": "https://jvn.jp/en/jp/JVN17482543/index.html", "@id": "JVN#17482543", "@source": "JVN" }, { "#text": "https://www.cve.org/CVERecord?id=CVE-2022-21173", "@id": "CVE-2022-21173", "@source": "CVE" }, { "#text": "https://www.cve.org/CVERecord?id=CVE-2022-21799", "@id": "CVE-2022-21799", "@source": "CVE" }, { "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-21173", "@id": "CVE-2022-21173", "@source": "NVD" }, { "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-21799", "@id": "CVE-2022-21799", "@source": "NVD" }, { "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html", "@id": "CWE-79", "@title": "Cross-site Scripting(CWE-79)" }, { "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html", "@id": "CWE-Other", "@title": "No Mapping(CWE-Other)" } ], "title": "Multiple vulnerabilities in multiple ELECOM LAN routers" }