Vulnerability · Published Oct 6, 2020 · Assigned by jpcert
CVE-2020-5634
High 8.8
In plain English
A high-severity security flaw in ELECOM LAN routers from ELECOM CO.,LTD.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)0.6%top 50.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10) allow an attacker on the same network segment to execute arbitrary OS commands with a root privilege via unspecified vectors.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ELECOM CO.,LTD. | ELECOM LAN routers | WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10 |
References
- https://www.elecom.co.jp/news/security/20201005-01/ x_refsource_MISC
- https://jvn.jp/en/jp/JVN82892096/index.html x_refsource_MISC