ELECOM Wireless LAN Access Points OS Command Injection Vulnerability

A command injection vulnerability has been identified in ELECOM wireless LAN access point devices. This vulnerability arises from improper handling of the 'ping_ip_addr' parameter, allowing logged-in users to execute arbitrary OS commands by sending crafted requests. The issue affects multiple access point models and versions.

Impact

Exploitation of this vulnerability allows for arbitrary OS command execution on the affected device.

Remediation

Users are advised to update the firmware to the latest version. Specific update instructions can be found on the ELECOM website.