ELECOM Wireless LAN Routers OS Command Injection Vulnerability

A command injection vulnerability has been identified in several models of ELECOM wireless LAN routers, including the WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN. This vulnerability allows remote authenticated attackers to execute arbitrary operating system commands by sending specially crafted requests through the Connection Diagnostics page. The issue arises from improper handling of special characters that could be used to manipulate command execution.

Impact

Exploitation of this vulnerability allows for arbitrary OS command execution on the affected router.

Remediation

Users are advised to update the router's firmware to the latest version. Instructions for checking the current firmware version and performing the update are available on the ELECOM website.