Search/CVE-2023-43757
● CVE — Medium

CVE-2023-43757

VendorelecomProductwrc-300febk firmware, wrc-733febk firmware, wrc-f300nf firmware, wrh-300bk-s firmware, wrh-300bk firmware, wrh-300rd firmware, wrh-300sv firmware, wrh-300wh-s firmware, wrh-300wh firmware, wrc-2533ghbk-i firmware, wrh-300wh-h firmware, wrc-1750ghbk firmware, wrc-f1167acf firmware, wrc-1167ghbk2 firmware, wrc-1750ghbk-e firmware, wrc-1750ghbk2-i firmware, wrc-1167ghbk firmware, wrc-2533ghbk2-t firmware, wrc-300ghbk2-i firmware, wrc-300ghbk firmware, wrc-733ghbk-c firmware, wrc-733ghbk-i firmware, wrc-733ghbk firmware, wrh-300bk2-s firmware, wrh-300wh2-s firmwareDiscoveredNov 16, 2023UpdatedNov 21, 2024

Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.

View graph Watch Export
CVSS v3.1
6.5 MEDIUM
EPSS
0.50%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Connections
26 relationships
Timeline
disclosure → media coverage
Nov 16, 2023
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024
Public PoC (1)
github.com/sharmashreejaa/CVE-2023-43757
Unverified third-party code — review before executing.