Inadequate Encryption Strength in ELECOM CO. ,LTD. products - CVE-2023-43757

Vulnerability identifier: #VU83490

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-43757

CWE-ID: CWE-326

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to inadequate encryption strength. A remote attacker on the local network can guess the encryption key used for the wireless LAN communication and intercept the communication.

WRH-H300WH
WRH-300WH
WRH-300RD
WRH-300SV
WRH-300BK-S
WRH-300WH-S
WRH-300BK2-S
WRH-300WH2-S
WRH-H300BK
WRH-300BK
WRH-150BK
WRH-150WH
LAN-W300N/RS
LAN-W301NR
LAN-W300N/P
LAN-WH300N/DGP
LAN-WH300NDGPE
WRC-2533GHBK2-T
WRH-300WH-H
WRC-F300NF
WRC-300FEBK
WRC-733FEBK
WRC-300GHBK
WRC-300GHBK2-I
WRC-733GHBK-C
WRC-733GHBK-I
WRC-733GHBK
WRC-1167GHBK
WRC-1167GHBK2
WRC-1750GHBK
WRC-1750GHBK-E
WRC-1750GHBK2-I
WRC-2533GHBK-I

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

• https://www.elecom.co.jp/news/security/20231114-01/
• https://www.elecom.co.jp/news/security/20230810-01/
• https://www.elecom.co.jp/news/security/20210706-01/
• https://jvn.jp/en/vu/JVNVU94119876/

• Inadequate Encryption Strength in ELECOM routers