Cyber Resilience

CVE-2023-35991

Critical

Published: 18 August 2023

Published
18 August 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0042 62.4th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-35991 is a critical-severity an unspecified weakness vulnerability in Elecom Lan-Wh300Andgpe Firmware. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 37.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P…

more

all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions.

CWE(s)
NVD-CWE-Other

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

elecom
lan-wh300andgpe firmware
all versions
elecom
lan-wh300n\/dgp firmware
all versions
elecom
lan-wh300an\/dgp firmware
all versions
elecom
lan-wh450n\/gp firmware
all versions
elecom
lan-w300n\/p firmware
all versions
elecom
lan-wh300n\/dr firmware
all versions
elecom
lan-w300n\/dr firmware
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References