CVE-2022-25915
Vulnerability from cvelistv5
Published
2022-03-31 08:55
Modified
2024-08-03 04:49
Severity ?
Summary
Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors.
References
vultures@jpcert.or.jphttps://jvn.jp/en/jp/JVN88993473/Third Party Advisory
vultures@jpcert.or.jphttps://www.elecom.co.jp/news/security/20211130-01/Patch, Vendor Advisory
Impacted products
ELECOM CO.,LTD.ELECOM LAN routers
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:49:44.278Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.elecom.co.jp/news/security/20211130-01/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN88993473/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ELECOM LAN routers",
          "vendor": "ELECOM CO.,LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Improper Access Control",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-03-31T08:55:10",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.elecom.co.jp/news/security/20211130-01/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jvn.jp/en/jp/JVN88993473/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2022-25915",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "ELECOM LAN routers",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "ELECOM CO.,LTD."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Improper Access Control"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.elecom.co.jp/news/security/20211130-01/",
              "refsource": "MISC",
              "url": "https://www.elecom.co.jp/news/security/20211130-01/"
            },
            {
              "name": "https://jvn.jp/en/jp/JVN88993473/",
              "refsource": "MISC",
              "url": "https://jvn.jp/en/jp/JVN88993473/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2022-25915",
    "datePublished": "2022-03-31T08:55:11",
    "dateReserved": "2022-03-10T00:00:00",
    "dateUpdated": "2024-08-03T04:49:44.278Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-25915\",\"sourceIdentifier\":\"vultures@jpcert.or.jp\",\"published\":\"2022-03-31T09:15:11.537\",\"lastModified\":\"2023-08-08T14:21:49.707\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de control de acceso inapropiado en los routers LAN de ELECOM (versiones de firmware WRC-1167GST2 v1.25 y anteriores, versiones de firmware WRC-1167GST2A v1.25 y anteriores, versiones de firmware WRC-1167GST2H v1.25 y anteriores, versiones de firmware WRC-2533GS2-B v1. 52 y anteriores, WRC-2533GS2-W versiones de firmware v1.52 y anteriores, WRC-1750GS versiones de firmware v1.03 y anteriores, WRC-1750GSV versiones de firmware v2.11 y anteriores, WRC-1900GST versiones de firmware v1.03 y anteriores, WRC-2533GST versiones de firmware v1. 03 y anteriores, WRC-2533GSTA versiones de firmware v1.03 y anteriores, WRC-2533GST2 versiones de firmware v1.25 y anteriores, WRC-2533GST2SP versiones de firmware v1.25 y anteriores, WRC-2533GST2-G versiones de firmware v1.25 y anteriores, y EDWRC-2533GST2 versiones de firmware v1.25 y anteriores) permite a un atacante autenticado adyacente a la red omitir la restricci\u00f3n de acceso y acceder a la pantalla de administraci\u00f3n del producto por medio de vectores no especificados\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:A/AC:L/Au:N/C:P/I:P/A:P\",\"accessVector\":\"ADJACENT_NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":5.8},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":6.5,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1167gst2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9045F74-985E-4C3C-AC10-14FD9B61A746\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1167gst2_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.25\",\"matchCriteriaId\":\"D3AA3E1E-07AE-4152-A492-C3399A944BF7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1167gst2a:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A33E8405-7457-4867-A4A5-360E173F69C3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1167gst2a_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.25\",\"matchCriteriaId\":\"AC52913C-AD35-469D-8F67-0CBD929E7CC5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1167gst2h:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"56272E8D-141C-4BBC-9950-BD673DE78DF7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1167gst2h_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.25\",\"matchCriteriaId\":\"9E89A906-6747-4375-9027-598803400260\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-2533gs2-b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9FF3CB7-7F2E-472A-A2A3-ED599F4FC99C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-2533gs2-b_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.52\",\"matchCriteriaId\":\"838C19DE-7992-40DB-996B-9F3F2C0A6B5B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-2533gs2-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECD9F0FE-1232-4C39-AA86-2D616E4D39C6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-2533gs2-w_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.52\",\"matchCriteriaId\":\"CBD1BE1F-5197-4EFD-B34F-D39D97E07900\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1750gs:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F0C77E9-CD6E-498E-954B-A930EDB56CEB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1750gs_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.03\",\"matchCriteriaId\":\"0B90ED83-CB98-452B-A34C-F86256F2C1FF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1750gsv:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B805C94F-F3EA-4DF2-9BD0-82F5A3CC1AA3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1750gsv_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.11\",\"matchCriteriaId\":\"8A65A768-A630-4804-9746-FCBBF17EEC63\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1900gst:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C37FA743-9A1C-4817-9002-5B4A0D55EB30\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1900gst_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.03\",\"matchCriteriaId\":\"8A570270-DF00-4D05-8E38-09F465E4B4CA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-2533gst_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.03\",\"matchCriteriaId\":\"20A7CDAF-5B21-4D45-AEE7-F23374ABE11D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-2533gst:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"061E2CC5-C26D-4A99-B7B6-7AA16EA61FE0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-2533gst2_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.25\",\"matchCriteriaId\":\"5BFCF93B-086E-4566-B80C-2698526059ED\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-2533gst2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85BF0A23-43C9-4497-BDDF-9366642503ED\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-2533gsta_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.03\",\"matchCriteriaId\":\"C6BA52A2-79CF-4111-ADD9-F567CD7B6982\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-2533gsta:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A7E273D-FE44-4028-8A24-2E2F5346A8E8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-2533gst2sp_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.25\",\"matchCriteriaId\":\"78429AAB-582E-4E65-886F-3154B76B6F26\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-2533gst2sp:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87DCC539-2464-401D-BEDD-21D8F89D52E3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-2533gst2-g_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.25\",\"matchCriteriaId\":\"DF24D0CA-259A-48A3-A0C0-BBDA737BCEF8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-2533gst2-g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"52CFBBB2-A29E-49EC-9FF6-265C92C01D88\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:edwrc-2533gst2_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.25\",\"matchCriteriaId\":\"D1D5B7C7-E77F-43C5-AD15-EA9F9DA384A1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:edwrc-2533gst2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92158669-E6B4-4079-84F8-F86B7F288E24\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1167gs2-b_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.65\",\"matchCriteriaId\":\"D64B6BEE-3CC7-47B5-A9FD-EDB22A1C2F21\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1167gs2-b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30C37403-F848-4FD4-9AC3-FED5BF871163\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1167gs2h-b_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.65\",\"matchCriteriaId\":\"CCEF2CFA-D7EF-4CFA-9FD1-2285C3C20B72\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1167gs2h-b:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9E9EB42-AFE2-44DB-83A3-A9E74BB9A010\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wmc-dlgst2-w_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.24\",\"matchCriteriaId\":\"066EDB7C-F6DA-4579-8840-DA7C027006C3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wmc-dlgst2-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6091B225-964F-4410-A5AF-E3D42DF1A286\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wmc-m1267gst2-w_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.24\",\"matchCriteriaId\":\"B8D8ABD2-CB3F-47E2-8E20-0CEF1FAD6317\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wmc-m1267gst2-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7137BE2F-939D-4634-A665-E36A4576B280\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wmc-2hc-w_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.24\",\"matchCriteriaId\":\"D60CCA20-80E3-4928-BCA1-8F94177D2A5E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wmc-2hc-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA06B960-1038-4FCD-AA90-BF4FD553F649\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wmc-c2533gst-w_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.24\",\"matchCriteriaId\":\"364AA9FC-E24D-4A2F-A920-211A4692C0E2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wmc-c2533gst-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"13395C40-FAF6-4EB2-AAFA-1A143DEF01ED\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1900gst2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44AEB29B-9370-4C4A-8CEF-A1127FB48682\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1900gst2_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.15\",\"matchCriteriaId\":\"48746C80-F6D2-4E86-B75B-6025B59458C3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1900gst2sp_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.15\",\"matchCriteriaId\":\"1CA9BB7F-4338-4C35-9231-BD881D67100B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1900gst2sp:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49F9E3A1-8916-4B0F-8F57-E3D1757D9E7F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:elecom:wrc-1750gst2_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.14\",\"matchCriteriaId\":\"E2F6300B-1988-4A9F-84DE-30C59878FBEE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:elecom:wrc-1750gst2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD054832-3D35-40BF-B9DB-D0AC6C8AB000\"}]}]}],\"references\":[{\"url\":\"https://jvn.jp/en/jp/JVN88993473/\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.elecom.co.jp/news/security/20211130-01/\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.