CVE:CVE-2021-20859
CNNVD:CNNVD-202111-2336
elecom lan是日本Elecom的一款路由器。
elecom lan 存在操作系统命令注入漏洞，该漏洞源于不正确的输入验证。攻击者可利用该漏洞向应用程序传递精心构建的数据，并在目标系统上执行任意OS命令。
solution:Upgrade elecom wrc-1167gst2_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom wrc-1167gst2a_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom wrc-1167gst2h_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom wrc-2533gs2-b_firmware to a higher version than 1.52,and avoid the version (,1.52]; Upgrade elecom wrc-2533gs2-w_firmware to a higher version than 1.52,and avoid the version (,1.52]; Upgrade elecom wrc-1750gs_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-1750gsv_firmware to a higher version than 2.11,and avoid the version (,2.11]; Upgrade elecom wrc-1900gst_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-2533gst_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-2533gst2_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom wrc-2533gsta_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-2533gst2sp_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom wrc-2533gst2-g_firmware to a higher version than 1.25,and avoid the version (,1.25]; Upgrade elecom edwrc-2533gst2_firmware to a higher version than 1.25,and avoid the version (,1.25]