description: OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X1800GS-B v1.17 and earlier, WRC-X1800GSA-B v1.17 and earlier, WRC-X1800GSH-B v1.17 and earlier, WRC-X6000XS-G v1.09, and WRC-X6000XST-G v1.12 and earlier.
problem types: OS command injection
affected:
{
vendor: ELECOM CO.,LTD.
product: WRC-X1800GS-B
versions:
version: v1.17 and earlier, status: affected
}
{
vendor: ELECOM CO.,LTD.
product: WRC-X1800GSA-B
versions:
version: v1.17 and earlier, status: affected
}
{
vendor: ELECOM CO.,LTD.
product: WRC-X1800GSH-B
versions:
version: v1.17 and earlier, status: affected
}
{
vendor: ELECOM CO.,LTD.
product: WRC-X6000XS-G
versions:
version: v1.09, status: affected
}
{
vendor: ELECOM CO.,LTD.
product: WRC-X6000XST-G
versions:
version: v1.12 and earlier, status: affected
}
