{ "id": "CVE-2024-36103", "sourceIdentifier": "vultures@jpcert.or.jp", "published": "2024-06-12T01:15:49.220", "lastModified": "2024-06-13T18:36:09.013", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "OS command injection vulnerability in WRC-X5400GS-B v1.0.10 and earlier, and WRC-X5400GSA-B v1.0.10 and earlier allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product." }, { "lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n de comandos del sistema operativo en WRC-X5400GS-B v1.0.10 y anteriores, y WRC-X5400GSA-B v1.0.10 y anteriores permite a un atacante adyacente a la red con privilegios administrativos ejecutar comandos arbitrarios del sistema operativo enviando una solicitud especialmente manipulada al producto." } ], "metrics": {}, "references": [ { "url": "https://jvn.jp/en/vu/JVNVU97214223/", "source": "vultures@jpcert.or.jp" }, { "url": "https://www.elecom.co.jp/news/security/20240528-01/", "source": "vultures@jpcert.or.jp" } ] }