CVE-2023-37562

HIGH

ELECOM WTC-C1167GC-B and WTC-C1167GC-W < 1.17 - Cross-Site Request Forgery

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier. If a user views a malicious page while logged in, unintended operations may be performed.

References (2)

Core 2

Core References

Third Party Advisory

https://jvn.jp/en/jp/JVN05223215/

Vendor Advisory

https://www.elecom.co.jp/news/security/20230711-01/

Scores

CVSS v3 8.8

EPSS 0.0024

EPSS Percentile 14.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-352

Status published

Products (2)

elecom/wtc-c1167gc-b_firmware < 1.17

elecom/wtc-c1167gc-w_firmware < 1.17

Published Jul 13, 2023

Tracked Since Feb 18, 2026