description: OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command by sending a specially crafted request to the product.
problem types: OS command injection
affected:
{
vendor: ELECOM CO.,LTD.
product: WRC-X3000GSN
versions:
version: v1.0.2, status: affected
}
{
vendor: ELECOM CO.,LTD.
product: WRC-X3000GS
versions:
version: v1.0.24 and earlier, status: affected
}
{
vendor: ELECOM CO.,LTD.
product: WRC-X3000GSA
versions:
version: v1.0.24 and earlier, status: affected
}
