Security Resilience

CVE-2023-35991

Elecom Lan-Wh300Andgpe Firmware

Published
18 August 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0072 53th percentile
Risk Priority 72 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-35991 is a critical-severity an unspecified weakness vulnerability in Elecom Lan-Wh300Andgpe Firmware. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 47% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P…

more

all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions.

CWE(s)
NVD-CWE-Other

Related Threats

CVEs Like This One

CVE-2023-43757Same product: Elecom Lan-W300N\/P
CVE-2023-39454Same vendor: Elecom
CVE-2023-39944Same vendor: Elecom
CVE-2024-21798Same vendor: Elecom
CVE-2023-38132Same vendor: Elecom
CVE-2023-39445Same vendor: Elecom
CVE-2023-37565Same vendor: Elecom
CVE-2024-40883Same vendor: Elecom
CVE-2023-40072Same vendor: Elecom
CVE-2024-22372Same vendor: Elecom

Affected Assets

elecom
lan-wh300andgpe firmware
all versions
elecom
lan-wh300n\/dgp firmware
all versions
elecom
lan-wh300an\/dgp firmware
all versions
elecom
lan-wh450n\/gp firmware
all versions
elecom
lan-w300n\/p firmware
all versions
elecom
lan-wh300n\/dr firmware
all versions
elecom
lan-w300n\/dr firmware
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References