CVE:CVE-2023-37565
CNNVD:CNNVD-202307-947
ELECOM WRC是日本ELECOM公司的一款适用于家庭的网络摄像机。
ELECOM WRC-1167FEBK-A v1.18及之前版本存在代码注入漏洞，该漏洞源于存在代码注入，网络相邻的经过身份验证的攻击者可以通过发送特制请求来执行任意操作系统命令。
solution:Upgrade elecom wrc-1167ghbk-s_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-1167gebk-s_firmware to a higher version than 1.03,and avoid the version (,1.03]; Upgrade elecom wrc-1167febk-s_firmware to a higher version than 1.04,and avoid the version (,1.04]; Upgrade elecom wrc-1167ghbk3-a_firmware to a higher version than 1.24,and avoid the version (,1.24]; Upgrade elecom wrc-1167febk-a_firmware to a higher version than 1.18,and avoid the version (,1.18]