ELECOM Wireless LAN Access Points OS Command Injection Vulnerability

A command injection vulnerability has been identified in several models of ELECOM wireless LAN access points and routers. This vulnerability arises from improper handling of the username parameter, allowing authenticated users to execute arbitrary OS commands. The issue is present in multiple device models and versions, with no authentication required for exploitation.

Impact

Exploitation of this vulnerability allows for arbitrary OS command execution on the affected device, without the need for authentication.

Remediation

Users are advised to update the firmware to the latest version available for their specific device model.