« Volver al listado

CVE-2024-39607

Estado: AplazadaMedia (6.8)—

OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary OS command.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Elecom — Wireless LAN RouterAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-39607",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-39607",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-08-01T14:25:37.958754Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "vultures@jpcert.or.jp",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.8,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.9
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X1500GS-B",
          "versions": [
            {
              "status": "affected",
              "version": "v1.11 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X1500GSA-B",
          "versions": [
            {
              "status": "affected",
              "version": "v1.11 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X1800GS-B",
          "versions": [
            {
              "status": "affected",
              "version": "v1.18 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X1800GSA-B",
          "versions": [
            {
              "status": "affected",
              "version": "v1.18 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X1800GSH-B",
          "versions": [
            {
              "status": "affected",
              "version": "v1.18 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X3000GS2-B",
          "versions": [
            {
              "status": "affected",
              "version": "v1.08 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X3000GS2-W",
          "versions": [
            {
              "status": "affected",
              "version": "v1.08 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X3000GS2A-B",
          "versions": [
            {
              "status": "affected",
              "version": "v1.08 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-XE5400GS-G",
          "versions": [
            {
              "status": "affected",
              "version": "v1.12 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-XE5400GSA-G",
          "versions": [
            {
              "status": "affected",
              "version": "v1.12 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X6000QS-G",
          "versions": [
            {
              "status": "affected",
              "version": "v1.13 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X6000QSA-G",
          "versions": [
            {
              "status": "affected",
              "version": "v1.13 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X6000XS-G",
          "versions": [
            {
              "status": "affected",
              "version": "v1.11 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X6000XST-G",
          "versions": [
            {
              "status": "affected",
              "version": "v1.14 and earlier"
            }
          ]
        },
        {
          "vendor": "ELECOM CO.,LTD.",
          "product": "WRC-X3000GST2-B",
          "versions": [
            {
              "status": "affected",
              "version": "v1.06 and earlier"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:elecom:wrc-x6000xs-g_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "elecom",
          "product": "wrc-x6000xs-g_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1.11"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:elecom:wrc-x1500gs-b_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "elecom",
          "product": "wrc-x1500gs-b_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1.11"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:elecom:wrc-x1500gsa-b_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "elecom",
          "product": "wrc-x1500gsa-b_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "1.11"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-08-01T02:15:01.950",
  "references": [
    {
      "url": "https://jvn.jp/en/jp/JVN06672778/",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://www.elecom.co.jp/news/security/20240730-01/",
      "source": "vultures@jpcert.or.jp"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "vultures@jpcert.or.jp",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary OS command."
    },
    {
      "lang": "es",
      "value": " Existe una vulnerabilidad de inyección de comandos del sistema operativo en los enrutadores LAN inalámbricos ELECOM. Un usuario que haya iniciado sesión y tenga privilegios administrativos puede enviar una solicitud especialmente manipulada al producto afectado para ejecutar un comando arbitrario del sistema operativo."
    }
  ],
  "lastModified": "2026-06-17T07:42:19.423",
  "sourceIdentifier": "vultures@jpcert.or.jp"
}