Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.
Vendor
logitec vulnerabilities
15 published CVES affecting logitec, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 15
- Critical
- 3
- High
- 4
- Medium
- 8
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- LAN-W300N/PGRB 3
- LAN-W300N/RS 3
- LAN-W300N/PR5B 2
- LAN-W301NR 2
- lan-wh300n re 2
- LAN-WH300N/RE 2
- lan w300n pr5 1
- LAN-W300N/DR 1
- LAN-W300N/P 1
- LAN-W300N/PR5 1
- LAN-W451NGR 1
- LAN-WH300AN/DGP 1
- LAN-WH300ANDGPE 1
- LAN-WH300N/DGP 1
- LAN-WH300N/DR 1
- LAN-WH450N/GP 1
- LAN-WH450N/GR 1
Latest logitec CVEs
Newest publication first
-
HighCVSS 8.8
-
HighCVSS 8.0
Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console.
-
HighCVSS 8.8
LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service.
-
CriticalCVSS 9.8
Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR a...
-
CriticalCVSS 9.8
Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.
-
CriticalCVSS 9.8
Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port of the web management page. Affected products and versions are as follows:...
-
HighCVSS 8.0
Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary command by sending a specially crafted request to the web management page. Affected products and versions are as follows: WRC-1167GH...
-
MediumCVSS 6.5
Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL.
-
MediumCVSS 6.5
Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted.
-
MediumCVSS 6.8
Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors.
-
MediumCVSS 6.8
LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors.
-
MediumCVSS 6.8
LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors.
-
MediumCVSS 6.5
Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL.
-
MediumCVSS 6.5
Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted.
-
MediumCVSS 6.5
Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.