CVE Feed

    Dashboard / CVE / CVE-2023-43757

    CVE-2023-43757

    Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section.

    Published:Nov 16, 2023
    Last Modified:Nov 21, 2024
    EPS:Nov 16, 2023
    EPSS Score:0.00044
    CVSS Score:6.5

    Affected Products

    Vendor
    Elecom
    Product
    Lan-w300n\/p
    Vendor
    Elecom
    Product
    Lan-w300n\/p Firmware
    Vendor
    Elecom
    Product
    Lan-w300n\/rs
    Vendor
    Elecom
    Product
    Lan-w300n\/rs Firmware
    Vendor
    Elecom
    Product
    Lan-w301nr
    Vendor
    Elecom
    Product
    Lan-w301nr Firmware
    Vendor
    Elecom
    Product
    Lan-wh300n\/dgp
    Vendor
    Elecom
    Product
    Lan-wh300n\/dgp Firmware
    Vendor
    Elecom
    Product
    Lan-wh300ndgpe
    Vendor
    Elecom
    Product
    Lan-wh300ndgpe Firmware
    Vendor
    Elecom
    Product
    Wrc-1167ghbk
    Vendor
    Elecom
    Product
    Wrc-1167ghbk2
    Vendor
    Elecom
    Product
    Wrc-1167ghbk2 Firmware
    Vendor
    Elecom
    Product
    Wrc-1167ghbk Firmware
    Vendor
    Elecom
    Product
    Wrc-1750ghbk
    Vendor
    Elecom
    Product
    Wrc-1750ghbk-e
    Vendor
    Elecom
    Product
    Wrc-1750ghbk-e Firmware
    Vendor
    Elecom
    Product
    Wrc-1750ghbk2-i
    Vendor
    Elecom
    Product
    Wrc-1750ghbk2-i Firmware
    Vendor
    Elecom
    Product
    Wrc-1750ghbk Firmware
    Vendor
    Elecom
    Product
    Wrc-2533ghbk-i
    Vendor
    Elecom
    Product
    Wrc-2533ghbk-i Firmware
    Vendor
    Elecom
    Product
    Wrc-2533ghbk2-t
    Vendor
    Elecom
    Product
    Wrc-2533ghbk2-t Firmware
    Vendor
    Elecom
    Product
    Wrc-300febk
    Vendor
    Elecom
    Product
    Wrc-300febk Firmware
    Vendor
    Elecom
    Product
    Wrc-300ghbk
    Vendor
    Elecom
    Product
    Wrc-300ghbk2-i
    Vendor
    Elecom
    Product
    Wrc-300ghbk2-i Firmware
    Vendor
    Elecom
    Product
    Wrc-300ghbk Firmware
    Vendor
    Elecom
    Product
    Wrc-733febk
    Vendor
    Elecom
    Product
    Wrc-733febk Firmware
    Vendor
    Elecom
    Product
    Wrc-733ghbk
    Vendor
    Elecom
    Product
    Wrc-733ghbk-c
    Vendor
    Elecom
    Product
    Wrc-733ghbk-c Firmware
    Vendor
    Elecom
    Product
    Wrc-733ghbk-i
    Vendor
    Elecom
    Product
    Wrc-733ghbk-i Firmware
    Vendor
    Elecom
    Product
    Wrc-733ghbk Firmware
    Vendor
    Elecom
    Product
    Wrc-f1167acf
    Vendor
    Elecom
    Product
    Wrc-f1167acf Firmware
    Vendor
    Elecom
    Product
    Wrc-f300nf
    Vendor
    Elecom
    Product
    Wrc-f300nf Firmware
    Vendor
    Elecom
    Product
    Wrh-150bk
    Vendor
    Elecom
    Product
    Wrh-150bk Firmware
    Vendor
    Elecom
    Product
    Wrh-150wh
    Vendor
    Elecom
    Product
    Wrh-150wh Firmware
    Vendor
    Elecom
    Product
    Wrh-300bk
    Vendor
    Elecom
    Product
    Wrh-300bk-s
    Vendor
    Elecom
    Product
    Wrh-300bk-s Firmware
    Vendor
    Elecom
    Product
    Wrh-300bk2-s
    Vendor
    Elecom
    Product
    Wrh-300bk2-s Firmware
    Vendor
    Elecom
    Product
    Wrh-300bk Firmware
    Vendor
    Elecom
    Product
    Wrh-300rd
    Vendor
    Elecom
    Product
    Wrh-300rd Firmware
    Vendor
    Elecom
    Product
    Wrh-300sv
    Vendor
    Elecom
    Product
    Wrh-300sv Firmware
    Vendor
    Elecom
    Product
    Wrh-300wh
    Vendor
    Elecom
    Product
    Wrh-300wh-h
    Vendor
    Elecom
    Product
    Wrh-300wh-h Firmware
    Vendor
    Elecom
    Product
    Wrh-300wh-s
    Vendor
    Elecom
    Product
    Wrh-300wh-s Firmware
    Vendor
    Elecom
    Product
    Wrh-300wh2-s
    Vendor
    Elecom
    Product
    Wrh-300wh2-s Firmware
    Vendor
    Elecom
    Product
    Wrh-300wh Firmware
    Vendor
    Elecom
    Product
    Wrh-h300bk
    Vendor
    Elecom
    Product
    Wrh-h300bk Firmware
    Vendor
    Elecom
    Product
    Wrh-h300wh
    Vendor
    Elecom
    Product
    Wrh-h300wh Firmware

    Exploits

    https://github.com/sharmashreejaa/CVE-2023-43757

    Common Weakness Enumeration

    CWE-326 Inadequate Encryption Strength

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-112 Brute Force
    CAPEC-192 Protocol Analysis
    CAPEC-20 Encryption Brute Forcing

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High