WRC-BE72XSD-BA vulnerabilities
3 known vulnerabilities in WRC-BE72XSD-BA from Elecom. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.3 Critical severity
WRC-BE72XSD-B: Improper Neutralization of Special Elements used in an OS Command
ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authentication is required.
- 9.3 Critical severity
WRC-BE72XSD-B: Authentication Bypass Using an Alternate Path or Channel
ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication.
- 8.6 High severity
WRC-BE72XSD-B: Improper Neutralization of Special Elements used in an OS Command
ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processing a crafted request sent by a logged-in user, an arbitrary OS command may be executed.