ELECOM Wireless LAN Access Points Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in certain ELECOM wireless LAN access point devices. This vulnerability allows for arbitrary code execution when a crafted packet is received. Affected models include the WAB-S733IW2-PD, WAB-S733IW-AC, WAB-S300IW2-PD, WAB-S300IW-AC, and WAB-S300IW-PD, all running version 5.5.00 or earlier. Additionally, the WRC-X1500GS-B and WRC-X1500GSA-B routers, both with versions through 1.12, are vulnerable.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.

Remediation

Users are advised to update the firmware to the latest version available for their specific model. For the WAB-S733IW2-PD and WAB-S300IW-PD models, which are no longer supported, it is recommended to stop using these devices.