LOGITEC CORPORATION

Products

ProductCVEsExploitedLatest
LAN-W300N/PGRB3–Feb 12, 2021
LAN-W300N/RS3–Aug 18, 2023
LAN-W301NR2–Jul 13, 2023
LAN-WH300N/RE2–Aug 18, 2023
LAN-W300N/PR5B2–Feb 12, 2021
LAN-WH300ANDGPE1–Aug 18, 2023
LAN-WH300N/DGP1–Aug 18, 2023
LAN-WH300N/DR1–Aug 18, 2023
LAN-WH450N/GP1–Aug 18, 2023
LAN-W300N/DR1–Aug 18, 2023
LAN-WH450N/GR1–Feb 12, 2021
LAN-W300N/P1–Aug 18, 2023
LAN-W300N/PR51–Aug 18, 2023
LAN-W451NGR1–Aug 18, 2023
LAN-WH300AN/DGP1–Aug 18, 2023

Exploited and recent CVEs

  • CVE-2023-39445 Unrated Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the 0.6%
  • CVE-2023-38576 Unrated Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console. 0.4%
  • CVE-2023-38132 Unrated LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service. 0.3%
  • CVE-2023-35991 High 8.8 Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected 0.7%
  • CVE-2023-35991 High 8.8 Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected 0.7%
  • CVE-2023-35991 High 8.8 Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected 0.7%
  • CVE-2023-35991 High 8.8 Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected 0.7%
  • CVE-2023-35991 High 8.8 Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected 0.7%
  • CVE-2023-35991 High 8.8 Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected 0.7%
  • CVE-2023-35991 High 8.8 Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected 0.7%
  • CVE-2023-32626 Unrated Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arb 0.8%
  • CVE-2023-32626 Unrated Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arb 0.8%
  • CVE-2023-37567 Unrated Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain 2.4%
  • CVE-2023-37566 Unrated Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to th 1.1%
  • CVE-2021-20642 Unrated Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL. 1.0%
  • CVE-2021-20641 Unrated Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended oper 0.5%
  • CVE-2021-20640 Unrated Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors. 0.6%
  • CVE-2021-20639 Unrated LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. 0.5%
  • CVE-2021-20638 Unrated LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. 0.5%
  • CVE-2021-20637 Unrated Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL. 1.0%
  • CVE-2021-20636 Unrated Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended op 0.5%
  • CVE-2021-20635 Unrated Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network. 0.4%