CVE:CVE-2023-37564
CNNVD:CNNVD-202307-949
ELECOM WRC是日本ELECOM公司的一款适用于家庭的网络摄像机。
ELECOM WRC-1167FEBK-A v1.18及之前版本存在安全漏洞，该漏洞源于存在操作系统命令注入，网络相邻的经过身份验证的攻击者可以通过发送特制请求以root权限执行任意操作系统命令。
solution:Upgrade elecom wrc-1167ghbk-s_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-1167gebk-s_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-1167febk-s_firmware to a higher version than 1.04,and avoid the version (,1.04]; Upgrade elecom wrc-1167ghbk3-a_firmware to a higher version than 1.24,and avoid the version (,1.24]; Upgrade elecom wrc-1167febk-a_firmware to a higher version than 1.18,and avoid the version (,1.18]