Read the docs
TI-2023-20954 Aliases CVE-2023-40069GHSA-hh45-jmxc-j9rr

OS command injection in ELECOM CO.,LTD. WRC-F1167ACF

Priority MEDIUM 52CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-78.

Summary

OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01452 73rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ELECOM CO.,LTD.WRC-F1167ACFall versions—No fix listedCNA
ELECOM CO.,LTD.WRC-1750GHBKall versions—No fix listedCNA
ELECOM CO.,LTD.WRC-1167GHBK2all versions—No fix listedCNA
ELECOM CO.,LTD.WRC-1750GHBK2-Iall versions—No fix listedCNA
ELECOM CO.,LTD.WRC-1750GHBK-Eall versions—No fix listedCNA
  • WRC-F1167ACF VendorELECOM CO.,LTD. Affected all versions Fixed in — No fix listed CNA
  • WRC-1750GHBK VendorELECOM CO.,LTD. Affected all versions Fixed in — No fix listed CNA
  • WRC-1167GHBK2 VendorELECOM CO.,LTD. Affected all versions Fixed in — No fix listed CNA
  • WRC-1750GHBK2-I VendorELECOM CO.,LTD. Affected all versions Fixed in — No fix listed CNA
  • WRC-1750GHBK-E VendorELECOM CO.,LTD. Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:o:elecom:wrc-f1167acf_firmware:*:*:*:*:*:*:*:*all versionsVulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wrc-f1167acf:-:*:*:*:*:*:*:*not specified by NVDRunning onELECOM CO.,LTD.
cpe:2.3:o:elecom:wrc-1750ghbk_firmware:*:*:*:*:*:*:*:*all versionsVulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wrc-1750ghbk:-:*:*:*:*:*:*:*not specified by NVDRunning onELECOM CO.,LTD.
cpe:2.3:o:elecom:wrc-1167ghbk2_firmware:*:*:*:*:*:*:*:*all versionsVulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wrc-1167ghbk2:-:*:*:*:*:*:*:*not specified by NVDRunning onELECOM CO.,LTD.
cpe:2.3:o:elecom:wrc-1750ghbk2-i_firmware:*:*:*:*:*:*:*:*all versionsVulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wrc-1750ghbk2-i:-:*:*:*:*:*:*:*not specified by NVDRunning onELECOM CO.,LTD.
cpe:2.3:o:elecom:wrc-1750ghbk-e_firmware:*:*:*:*:*:*:*:*all versionsVulnerableELECOM CO.,LTD.
cpe:2.3:h:elecom:wrc-1750ghbk-e:-:*:*:*:*:*:*:*not specified by NVDRunning onELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wrc-f1167acf_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wrc-f1167acf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wrc-1750ghbk_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wrc-1750ghbk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wrc-1167ghbk2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wrc-1167ghbk2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wrc-1750ghbk2-i_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wrc-1750ghbk2-i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.
  • cpe:2.3:o:elecom:wrc-1750ghbk-e_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ELECOM CO.,LTD.
  • cpe:2.3:h:elecom:wrc-1750ghbk-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ELECOM CO.,LTD.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-40069
  2. 2026-10-03 Alias added: GHSA-hh45-jmxc-j9rr

References

Advisory 2

  • TI-2023-23457 Inadequate encryption strength vulnerability in multiple routers provided by ELECOM… CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences