ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-43757

—
CVSS 3.1
6.5 medium
EPSS
<1%p41
Published
()
Modified
Description

Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.

Vendors
elecom
Products
wrc-2533ghbk2-t firmware, wrc-2533ghbk-i firmware, wrc-1750ghbk2-i firmware, wrc-1750ghbk-e firmware, wrc-1750ghbk firmware, wrc-1167ghbk2 firmware, wrc-1167ghbk firmware, wrc-f1167acf firmware, wrc-733ghbk firmware, wrc-733ghbk-i firmware, wrc-733ghbk-c firmware, wrc-300ghbk2-i firmware
Weakness
CWE-326
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

No ingested article mentions this CVE yet.