CyberSecBulletin

LOGITEC vulnerabilities

We track 6 vulnerabilities in LOGITEC products across 5 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on August 18, 2023.

6vulnerabilities
2critical
4high
0exploited
8.9average CVSS score

Latest LOGITEC vulnerabilities

  • 8.8 High severity

    LAN-WH300N/RE: Improper Control of Generation of Code

    CVE-2023-39445LOGITEC

    Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.

  • 8.0 High severity

    LAN-WH300N/RE: Improper Control of Generation of Code

    CVE-2023-38576LOGITEC

    Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console.

  • 8.8 High severity

    LAN-W451NGR: Improper Access Control

    CVE-2023-38132LOGITEC

    LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service.

  • 9.8 Critical severity

    LAN-W300N/RS: Improper Control of Generation of Code

    CVE-2023-32626LOGITEC

    Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.

  • 9.8 Critical severity

    WRC-1167GHBK3-A: Improper Neutralization of Special Elements used in a Command

    CVE-2023-37567ElecomEPSS 2.36%

    Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port of the web management page. Affected products and versi

  • 8.0 High severity

    WRC-1167GHBK3-A: Improper Neutralization of Special Elements used in a Command

    CVE-2023-37566ElecomEPSS 1.12%

    Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as